895d34cd26e435a52177a1cfee6b93a5f5bc3b8d3bf66b755049d6a38ccb3b29 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06-03-2024 03:01

Sharing

Report Analysis Logs

General

Target

b657512958241707684709a51d4c8461.pdf
Size

34KB
MD5

b657512958241707684709a51d4c8461
SHA1

2f019d5debe56f757223e89c484c16a61f4f6363
SHA256

895d34cd26e435a52177a1cfee6b93a5f5bc3b8d3bf66b755049d6a38ccb3b29
SHA512

39e72f8c841275188e79f65cf1ca9de4e51d995791bdac9a28924dc5fc8dfaf75d5659248c524bf77508014bae79d376db2a420e7070e5c38672794bec6b7cc4
SSDEEP

768:bbP45748r+isV0v0MFsgXDPqq4a8ZsJLpj29ifp7S:38y08M/14Q/vfp7S

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2168	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2168	AcroRd32.exe
2168	AcroRd32.exe
2168	AcroRd32.exe
2168	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b657512958241707684709a51d4c8461.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
587562ab36db07337d4067299a050810

SHA1
ccf66d62bcac0b21db5eb0890c6fe2a2f426a437

SHA256
ea0cdcf6d453f3551e87376b310509731ad6bc6250104bb1734b2246dd94f982

SHA512
3bb363cba74d7b756349c1429d9747fabd807934607ab4cb1c33a3d153eebf52b3ab4c230d6d38dc40f0fbfe0d472ee0a4171da42a3245d03d6099e0f962f62a

Download Submit