9420075092c82e61fcbb6658d98bea32a8069fed467957f1ba37dc8198358207 | Triage

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
28/02/2024, 06:27

Sharing

Report Analysis Logs

General

Target

ab389c002a2c5182a74eda4c9f552dbc.pdf
Size

100KB
MD5

ab389c002a2c5182a74eda4c9f552dbc
SHA1

2d93d80a743849f5f1e8de5eeb0001780678bc52
SHA256

9420075092c82e61fcbb6658d98bea32a8069fed467957f1ba37dc8198358207
SHA512

286656a661c2609398bc8664ae023f0abc34ef6119e121bb7b6d34cd22fbe948c805feaad7cd86f142a0d86e1267cd59b4015c2d2fcb13f70ada8cde3e6387e2
SSDEEP

3072:0KffHym+Y6kgJw+jMtRtQtIj/KBWHj3vW:0AfHhfWMNyV

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2092	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2092	AcroRd32.exe
2092	AcroRd32.exe
2092	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ab389c002a2c5182a74eda4c9f552dbc.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2d43dbfae322d41d6d7c73cc556497d1

SHA1
432a288decebd80d43517e951306a2f6c84c6e35

SHA256
2a1ddc40febf1686b0514008f0072580edbb43182fb31b532463dafff1a31325

SHA512
91de3c0f9aaf3d58725ec64ed83aad7fd7c8e01108b46dc29fdfcbd2fdd2a365216a6ce1b01a1476a46c7da7b6b9454d821046dbbb165f815322c8f3c91b9976

Download Submit