78edc707f5ef6df823bafc46104b22726f2bc0ac0a2bf5d8eb593d364117c37f | Triage

Analysis

max time kernel
120s
max time network
131s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06/03/2024, 10:48

Sharing

Report Analysis Logs

General

Target

b73b74fa803cde2f3f0cc26df916a3c8.pdf
Size

103KB
MD5

b73b74fa803cde2f3f0cc26df916a3c8
SHA1

ccc9a4db3ce53f79dde427533f28baceb1bd80ab
SHA256

78edc707f5ef6df823bafc46104b22726f2bc0ac0a2bf5d8eb593d364117c37f
SHA512

3b4ba3e3d454ee7902c42a5f8087813afeac548bc52874784a95ee499bce32643f98806a86ec8fdfd45ff611d5bef868402b7bb7545cfe712e2e9b11c7da591a
SSDEEP

3072:iGqNpCE5ArLYSr0qIYWCbU4RMs3GqJqlDg1U:EpCeArBeG5nQ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2888	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2888	AcroRd32.exe
2888	AcroRd32.exe
2888	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b73b74fa803cde2f3f0cc26df916a3c8.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6833d1e4e47aff2e94c10f462281e943

SHA1
3c655de5dff4fe25cce0f3430288bcb5fc929fa4

SHA256
eed5d3e40022bb0aa8201a79403a5695c744b6c1d6492da8b214c5b750ae3213

SHA512
fe2f0e094923177694600cb38946cd946cd8ec0774b04446a900a79a8464ef8cb33b47fafdc9f5392f7413d613896abf685b7525c8cea18908a1ed4b0095db01

Download Submit