8a50526057de4c4f2d657fe94e16c20b6d9d5d63b3e1f3a005d96adfbb48110c | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
06/03/2024, 04:07

Sharing

Report Analysis Logs

General

Target

b677b10a5c99c4ef4b863b24997ff91c.pdf
Size

105KB
MD5

b677b10a5c99c4ef4b863b24997ff91c
SHA1

b60475a0ecc0b03865a3dc927f3a2032f311848e
SHA256

8a50526057de4c4f2d657fe94e16c20b6d9d5d63b3e1f3a005d96adfbb48110c
SHA512

44ee568e7284c5995f6f63106122dd79fdbdfd4d834c6dc95a4d31f20bf89c7ef5a70770e41203e724403b051d83ad0d6784fbcfa30be0a45057c587561157a5
SSDEEP

3072:rqNIYsvP4Ydq4IcI3WX2LDJZHMNwr3g2cBAQX:r4SZAV3WQJZHfSBB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2240	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2240	AcroRd32.exe
2240	AcroRd32.exe
2240	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b677b10a5c99c4ef4b863b24997ff91c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
43e2eea7a6363303e6a9235c3647e3b3

SHA1
3a3d6cda32b1e1aa6fbf43260b9af3a183830305

SHA256
2482df40b9d0ca3f117063df728bbf3b99e06dc344b1a1962c21b2fe407aa4a8

SHA512
b055c2b4130e5ac4c8520997f434e60885fee562cd746f73e8461fcc9b71a72c511e0503e3e03c755368c3486fa4fd9d2ebca8ea35d79ebedad41f05fd7e8951

Download Submit