4a3cd765a8400c787d5f8b87b3ab26335a1c7775cbf3900bc517818a19b193f8 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
06/03/2024, 12:03

Sharing

Report Analysis Logs

General

Target

b75b1f51f138376b08444b3b275a5603.pdf
Size

33KB
MD5

b75b1f51f138376b08444b3b275a5603
SHA1

e3f5907479b6a22bbedda0668cd2b291ab78a62b
SHA256

4a3cd765a8400c787d5f8b87b3ab26335a1c7775cbf3900bc517818a19b193f8
SHA512

71cb0cb1aa1807994de8e92687f15d33e01fc47b618a775311a3aaffd035d3e3995d494e073b60a8bb23f4588ec092b4502378bc99f60fadf8bb49d99f774332
SSDEEP

768:tkMBllCj3fJq1UKMY9LlbsSYxFXgFZQE44kfG:SMvlC3IOK59xNMFXgHQE44kfG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2064	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2064	AcroRd32.exe
2064	AcroRd32.exe
2064	AcroRd32.exe
2064	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b75b1f51f138376b08444b3b275a5603.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
96a82278831eb5dcc8724ca85a672b7a

SHA1
d975c9f82e1e23a2768ab4ef2cf420cd113e2de0

SHA256
3983c7a4fe461d00af17c684a6f81782c281b1b5ae1c075560faf35b2dac470a

SHA512
73c2c0360e92170bb6a18638274c71f328ff33ce5f9e18447d29b51a26c1ac6dd2ca5a5368014bb050873fc4087f866d989d90e18ee0abe75c96aa51db5e3b5a

Download Submit