f852ffc31ff57c2ca45d72bf481ae2db66b7eae07585e1a743150822bd8e31df | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
29-02-2024 03:34

Sharing

Report Analysis Logs

General

Target

ad94e111d767916b4f74614039203c3a.pdf
Size

33KB
MD5

ad94e111d767916b4f74614039203c3a
SHA1

d3c6cc6b7e6646c5d24bb271f1e94f2a13de069f
SHA256

f852ffc31ff57c2ca45d72bf481ae2db66b7eae07585e1a743150822bd8e31df
SHA512

649d99cd972c7f1e287dc84dbc26961966f5ed0d97d8f80b7237206d536f62c22ada305a63e4662281d3a194399440da0a04053bdcc472ede8c74b4189e56d26
SSDEEP

768:nkalv3iQsb8UUs7ivTWOCrVvjJ89WFw2a:Li8ZeOFCZva9Wq2a

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2232	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2232	AcroRd32.exe
2232	AcroRd32.exe
2232	AcroRd32.exe
2232	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ad94e111d767916b4f74614039203c3a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
476ef505d3efaea20e074224e3f92dc5

SHA1
bfded62810588744c34bb96d2bcb385244caf280

SHA256
c8eab14b9a706d0fe1129984579313b724ca88f7d5b10983c3dbe48e79c0ba73

SHA512
956ec111b2b525f00017fef1381de159ac5404238a28303ae78d3cb746038c3926fbf3d4c3ce304df16b07b30d5ec91fef5f8860934c4020fe43aa7c252f6405

Download Submit