a90dd6b3a0aa98924ff76c8727893fbe4f4086669ca80dab0c0a61d1bb95b6b5 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
08/03/2024, 03:03

Sharing

Report Analysis Logs

General

Target

ba5a9aaf0ff67fade85b05a5e979844d.pdf
Size

33KB
MD5

ba5a9aaf0ff67fade85b05a5e979844d
SHA1

877d5dd040b511145c82bbef57bbdf429f5a20b4
SHA256

a90dd6b3a0aa98924ff76c8727893fbe4f4086669ca80dab0c0a61d1bb95b6b5
SHA512

8b7e3655ed125d1be4818447b68e4442a24b3ae05d4e03bd7845728276391656bf4c64436fd90b6efda122ef30ddf3175b9a1dda43301395bed396b044078beb
SSDEEP

768:VwhJHnM3s6g4tvuqkcJd2cpiQsQWVkU6WOWfJ:VoJHnMFXkvdQu6WffJ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2792	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2792	AcroRd32.exe
2792	AcroRd32.exe
2792	AcroRd32.exe
2792	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ba5a9aaf0ff67fade85b05a5e979844d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
72f5049c707411225547f85bb480a731

SHA1
d3b1ff1056b146baa2d3c2f9b97b74ca220ae274

SHA256
beaa08e89a49b73c906b1bbcffa440d57c7c11c33bdfcefb7bbce3af03a0db20

SHA512
f3981aa3220ba66b7f964af3b07fb20898676f33c488ef8e41eecec20757fa1cd013d4a6672c061e19e2dffb502236d7deab4141b4565a118e5fa6ea4c05073a

Download Submit