f270c136b346e67ad5752d4cbc54e57414e47b42aa630128b228aaccb4c221b0 | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28-02-2024 14:18

Sharing

Report Analysis Logs

General

Target

ac16dca9db22a13f7cfe5397ec8dc844.pdf
Size

33KB
MD5

ac16dca9db22a13f7cfe5397ec8dc844
SHA1

a16c23f6ed8200ec9126e798632a7a6d0263a5f5
SHA256

f270c136b346e67ad5752d4cbc54e57414e47b42aa630128b228aaccb4c221b0
SHA512

58bab3c317a14ac09175e0979a9c64e13b6f052bce8389dfdb0f178afc796eeac265b995f42a495eb3ce1a601741c576be43e79ccd96af4edc53f744b72131eb
SSDEEP

768:TkdzC6xfOLRCbI3S4DOGEj21Vxu2XxISoCv:TkdzcxC21V4O5v

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2344	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2344	AcroRd32.exe
2344	AcroRd32.exe
2344	AcroRd32.exe
2344	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac16dca9db22a13f7cfe5397ec8dc844.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9526b6367db16e48745f5f4eb83d9077

SHA1
369dae0ad751197b663e2912b493adf2ff3e2cf3

SHA256
6c6b98d68436e90ab70015ba021bf8d5b4483c86e9e361cce175405b76439c56

SHA512
3f7132d953b0c89a1a24b7a218aa344511f4b1218a442c0d449630f69c874a864208a9165b343d4c498aaadec05950c3b680d28dd743928cb80012ed2bb50e7d

Download Submit