53b2caa0601b3e9c07241e6b6d19764570459fc4d0246530eca84ef52a7d8d3b | Triage

Analysis

max time kernel
120s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
29-02-2024 00:38

Sharing

Report Analysis Logs

General

Target

ad41584b970858a8c709b6fb4b850934.pdf
Size

74KB
MD5

ad41584b970858a8c709b6fb4b850934
SHA1

ccfc500e2d8028d7722ef10d31ca11ebbf7888cd
SHA256

53b2caa0601b3e9c07241e6b6d19764570459fc4d0246530eca84ef52a7d8d3b
SHA512

10105f89116fa2bd1ad7a1e83425b5a7f78c35746e0e7d3eb0f6d1db9d850c874bb8ffc22e3dd32404b0a1ee24899da71052380b847c99ac0d701f598e59c1b4
SSDEEP

1536:0VE8y2ngofF/9RLhgSm5JOVFii37/4Xf1S5qYKPLcUq:sEh2gwXSOhwtS5qYELG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2232	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2232	AcroRd32.exe
2232	AcroRd32.exe
2232	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ad41584b970858a8c709b6fb4b850934.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
662e0f38d245b659ce8f7bf5e72bd9b6

SHA1
d0ec8efa4b4b017307689cfabc323f31889dfc9b

SHA256
ec95a9fad79e04baa10203f17b68468d76fee85e175c23d8abf825f257aae8e3

SHA512
f45cbdd0ad69fc1f751aedddf8d67a03401c82a5050044ad0c166911cb6619401039081962f3c51420cc63ee9ee2dbb54f5e0d793d0e258920656504c78fcd30

Download Submit