3034cfe0495b5791a996ce2a4a89af33dbc108a97e425f95cdcd4ea37599e1e0 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
05/03/2024, 12:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

b4b5c03e805ae9ee9316be5771790998.pdf
Size

34KB
MD5

b4b5c03e805ae9ee9316be5771790998
SHA1

9077e459924320848e33336d620a2e0b4ca77c03
SHA256

3034cfe0495b5791a996ce2a4a89af33dbc108a97e425f95cdcd4ea37599e1e0
SHA512

89cd0b4c606f2b9e372b3da3b233a18c8a31c0c4cc2fe1dc0c47d3f6540969107eb17368dd80d1f2e4116d564767489396254f2abaeb6e596d184f5c0718d4fc
SSDEEP

768:oxRvTRynDsYGhB1HcMtmJuVvMFbf8qy1PLxU8UKgV:4RbIncln8kVvQb0DxlgV

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2928	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2928	AcroRd32.exe
2928	AcroRd32.exe
2928	AcroRd32.exe
2928	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b4b5c03e805ae9ee9316be5771790998.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2b62338e6754f19693e15a6ef84cb52d

SHA1
54eafd9dbf71f7d7d343f4c9d619e28418d62d5a

SHA256
69ca4e32ae003512fbbc8f28661e398279e5a56bf656501d3da3231d7014d3ec

SHA512
5c7d064e4224751053d46e5dbb30cb53d60dd83871cef478d2694c4990350a8c83e08e1c8f1ba384050c92709bc1cc0523ec985a8eef1a4f35130037e0469467

Download Submit