4ce87b945b95ddafda9ce0bcc4c6ad3066eaa559858c308b8ab8486d5a6684b1 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06/03/2024, 10:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

b72bc8c2950ec03044a4b06576096fcc.pdf
Size

99KB
MD5

b72bc8c2950ec03044a4b06576096fcc
SHA1

c58fac32cd82557f1aa435ae82307bfdec08859d
SHA256

4ce87b945b95ddafda9ce0bcc4c6ad3066eaa559858c308b8ab8486d5a6684b1
SHA512

d4493b20508a0bbe1584cedc9bac2549b63e57dad5e6b23956afca056cf36932677dc5ce8a71a814447f58cee6b8ad1708bf0a33c3651ebd36535fdc207f0c5a
SSDEEP

3072:OOB3vYywYlce/WQ8/F6Nbcjyg62dOe7TUWj4E:Ovz6mR/4NbcuvwLjR

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2944	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2944	AcroRd32.exe
2944	AcroRd32.exe
2944	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b72bc8c2950ec03044a4b06576096fcc.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
552b6d5c0bdf11b77949ccbc7a07f4c9

SHA1
2ad14279a41b856843bdee1506df7336b2897004

SHA256
4f9245a2998f5096761d58ea3a3564a613cb99bf7c8d290ce957e01364f4c366

SHA512
7f7d131ae2f4b05ab1dfa3dc2db5b197f526bc612c81c8a723465034cb0714f8cb4983d56b525b77c1542f5802f822d9f67554175716e6c61d8098e2a31bdc69

Download Submit