ba7c89aaeb4705498960b9c3e9629fae9cc7df4a105d343c455c7f7a166ae824 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/03/2024, 00:09

Sharing

Report Analysis Logs

General

Target

ba038676f373f7cec8efba3d7025a241.pdf
Size

195KB
MD5

ba038676f373f7cec8efba3d7025a241
SHA1

8f1b41156490fa6d34788228793d89a931f1c5f4
SHA256

ba7c89aaeb4705498960b9c3e9629fae9cc7df4a105d343c455c7f7a166ae824
SHA512

6586cad11af5df12c63f8854d85b91f4bcf681ef885b0fee6bde4f3f4ba4cc1d6d09ea248b9a1d1461ae3d9a2f4ee47e8cb5b67b5dbc69589276b979f06639d9
SSDEEP

6144:T+nc+zfoWMB8C/XvKPv/2WAgqPpmZnzT2v:T+n5wW4HXvgicZn3g

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2320	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2320	AcroRd32.exe
2320	AcroRd32.exe
2320	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ba038676f373f7cec8efba3d7025a241.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d5ba1f8eecc8da00d9a7cd0412e3814e

SHA1
dad2181459128f7181bf78dac4d0f6e53554bcaf

SHA256
abd14a562c6080b4c85ebbbad4ef2981035db761e953ea718b295ccb4d26d034

SHA512
f0ecb1fb22e292a7929e52eae091a9649f6a9d122b1ffd43f7c5b33df28cf190f063492c6006400163b5102e1b4b2d9c0aebf7f5ad16d50ddba543915f10f912

Download Submit