acf3ed1262e1f131c936a5ef68b123a1f00523e6b15a7d249c5c28c001077469 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27-02-2024 17:58

Sharing

Report Analysis Logs

General

Target

a9cbc1b46525844f42443986f99b5242.pdf
Size

35KB
MD5

a9cbc1b46525844f42443986f99b5242
SHA1

1edba9ad1384b68b11516783ed9a0d5548c5248a
SHA256

acf3ed1262e1f131c936a5ef68b123a1f00523e6b15a7d249c5c28c001077469
SHA512

9fea6fb9617b0609241fb72dbc0cec0bffa5a68872c7bf7ba2ce8a217c97be22a246a511a738632662f39a1b39d4d9d0fb00ae8edff6d8f91fdba5602e8b5f4c
SSDEEP

768:xz/GpmgyLPs8EQtLNQ89lIsfDYquF2oPLrJRXyIL8Y9:BulyLsQzQuI5qBIDnL8U

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2844	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2844	AcroRd32.exe
2844	AcroRd32.exe
2844	AcroRd32.exe
2844	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a9cbc1b46525844f42443986f99b5242.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9fc579c3756911eedbb7e389d880f711

SHA1
9b6b74f5610613b42f45efe7c2fa96b374b8b470

SHA256
3e7d5d3551d467cd2309b27d55f3b60f10ed057c216428e566a67c4e1cea966b

SHA512
2d00265d3524384bc83733bafe881a51d6adad8fc5923e05f77d4e4d4a613a2066535c597826832c8afd8d7c3c21a8e9fe081b582f69c21e40ebe2911728c370

Download Submit