7806c8f3d5eb67f57412af1e7df4641e2ad85346fca8f77d8cbae76556b78bc6 | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/02/2024, 10:53

Sharing

Report Analysis Logs

General

Target

abb58c63c79146b12bcf724b3e1b30da.pdf
Size

97KB
MD5

abb58c63c79146b12bcf724b3e1b30da
SHA1

86cb9aa2eb19e24061de965a7aed07e08217766d
SHA256

7806c8f3d5eb67f57412af1e7df4641e2ad85346fca8f77d8cbae76556b78bc6
SHA512

b5dbb7bc79b12de885d705decb512413b37da8a285d461744814698c5f294d5b68dd19ff384f28213c406417ffbd776e1528e0c2d328b7cebf4480161eb71dfd
SSDEEP

3072:dACqLVpKO4L5KfnfkNcuu9wPsfu4RqA0IabJpRo:dAp0O4LcnMOuywEfxZaG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2164	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2164	AcroRd32.exe
2164	AcroRd32.exe
2164	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\abb58c63c79146b12bcf724b3e1b30da.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2164

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9ac396fadbd91e327562e5ad1f610a6d

SHA1
1085e2643a1f640fd70f46d64edeabdea7ab1fe0

SHA256
355cf348ea9ab1aefffed0eba2626af64a1cb91f35705ea0dc2f5ee89703a423

SHA512
101a9a421a725f3ea166565d892b7fae4aed03ec09bf8ac8a94f5df2a08c18ead83faee9b0b51c206c9b410ba25a21418dfae68656e24148fdedf230ee11a036

Download Submit