95373ec653a37426f2a21649980ce220010a143851323ce566d0c29cce4efc0d | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27/02/2024, 19:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

aa05e57f46720f95560f839754daed98.pdf
Size

34KB
MD5

aa05e57f46720f95560f839754daed98
SHA1

53d076b083094d9c29f2ea3cb68b6d3db43541cc
SHA256

95373ec653a37426f2a21649980ce220010a143851323ce566d0c29cce4efc0d
SHA512

1137e6ecb8b02186b6e8a03f9287e82379f28a83553b9985c9f8399ffe4079f29c79696546c525dfef5fd8f663deb96d111b86098f3a0b46286b19a8fe5cac61
SSDEEP

768:bYWluD9yBwsifby0bXQBAg0J5Yg8XWWiI2VEi:uDIiy0LRzXYg8XRkEi

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1720	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1720	AcroRd32.exe
1720	AcroRd32.exe
1720	AcroRd32.exe
1720	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aa05e57f46720f95560f839754daed98.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
8f9f16b9a8eb811c3ff5abdf13c556c5

SHA1
31c040b45a196648e70b0faeb13d6e3ccf2e06de

SHA256
c872ddbc98196228027ec45ec80279d730ca65c5734474af1e701670193068da

SHA512
416e0671d97c2e579e6d710bff5e1b51a797618cb9ee3859540e1059bc852b99f194af1293158836168da2fb4083bdccc538f1d1fc14ff826cdae1137d58a6c6

Download Submit