8c0ba45e38a5dfb26cdd253294a6116b92a01a560dadf99033508278571b1bb5 | Triage

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
05/03/2024, 08:51

Sharing

Report Analysis Logs

General

Target

b44bbc9d26b62de1675051d68a447482.pdf
Size

32KB
MD5

b44bbc9d26b62de1675051d68a447482
SHA1

27b2f576b17e6c827110b01f9e5147df715aac18
SHA256

8c0ba45e38a5dfb26cdd253294a6116b92a01a560dadf99033508278571b1bb5
SHA512

96919699673a50740303522e1aa859aa97ceea5c2e991e6597f22268da5a906b07f9fb7453ebe3da1002e5cf5a4f0d2302a4f32c4f20a500429ac7b2f1b4a09e
SSDEEP

768:1gGzpDGp24U2nLOgXRWMybqzGWAHtDijcbkkFv:mGFqp2oPbQtD22kkFv

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2356	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2356	AcroRd32.exe
2356	AcroRd32.exe
2356	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b44bbc9d26b62de1675051d68a447482.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
49d9a7a0df97c619c537405c6be616fa

SHA1
0161e39fd062874eb20b51ac33d77805dd6365e0

SHA256
f52ce0997988d209395571a85ebec98815f28a443374fb15245aa99ff7e33dee

SHA512
6f6cc2e22d473119a34b5706e21b1de80c6aa81126399ae1f8d03744c3f88d564d2fe96127e6c0f995d3d0600133ce1f149c3a008a869aeaf6d09977b5639e90

Download Submit