af1524d4655b12c29985a3db67e87ec2a93f009e577032fd82a60e4b11e72899 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/02/2024, 22:04 UTC

Sharing

Report Analysis Logs

General

Target

acf7c3cbd6b9de29f3e7cd8bf15837af.pdf
Size

57KB
MD5

acf7c3cbd6b9de29f3e7cd8bf15837af
SHA1

3298ccb0b3e72900462be62c1ccc23c68f8323ce
SHA256

af1524d4655b12c29985a3db67e87ec2a93f009e577032fd82a60e4b11e72899
SHA512

b2dc7a791e56927a1dd5c53709788f0f94328a1feba323aed17570a036ab5b1d96f589a40f7cedd6d9e6a8dce7afa3824123e88767ba5d07437eb3533fa06af8
SSDEEP

1536:0nQpsA1X8lKC/xuhPicLw1e/Il9jEqNe2HmHhjoC:N1X8lv/xuh20/IzIqNef9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2072	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2072	AcroRd32.exe
2072	AcroRd32.exe
2072	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\acf7c3cbd6b9de29f3e7cd8bf15837af.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
75ec794e3d513d64632c1447bd87b107

SHA1
39ff36d7e0b6772756f07bbe376902b774dc61cb

SHA256
c7d190c5ba3ccf023bc0039261eadf6e02e91aeb03cc29b00222644b8eb381b3

SHA512
741f73099953cf05a1a59080f43f6774a6487048651edb007ba3739ce8e3e5a2b5960235954993968d22292cb7683257421eaae6451358bdd4dbcc62c76a0501

Download Submit