e7f952b1106069622b87ac578cbda8ecc2209979854d8af7b390c93b4c9a7e72 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
08/03/2024, 09:19

Sharing

Report Analysis Logs

General

Target

bae24cb07354e7ef79cb3f24d6ee69fe.pdf
Size

33KB
MD5

bae24cb07354e7ef79cb3f24d6ee69fe
SHA1

453d681d08b10105930214f8c9a2b34f626a910b
SHA256

e7f952b1106069622b87ac578cbda8ecc2209979854d8af7b390c93b4c9a7e72
SHA512

322fed849ffbd08ef2e473a1114541f05d4708abd91741946554d1116f41f6d5605232782900cb297bcbc923fe6646b950243f756ae8ae19b93f85a9eb33e702
SSDEEP

768:YWI/fkGsjvDxnMPb1a4QiP+sLfr/8wI748:TeMZMPb1a4QiP+sLfr/87748

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1964	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1964	AcroRd32.exe
1964	AcroRd32.exe
1964	AcroRd32.exe
1964	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bae24cb07354e7ef79cb3f24d6ee69fe.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
07fa5431ca19b1cada0c6e293011ae59

SHA1
c6fa4a24855e8da8bcd28636d4479d67666ef4d6

SHA256
efb3d04cfdb91fbfbff977a4bd0b7075585b0634a34bae746649622bb6695cc9

SHA512
f0a651d966a85aa009b94597a260f1a6e91e182333e0f03316a596699f8b0a87b78ce8b5398aaf3358155bce241c298fa72e0ecf9ada4f478e460e942e91f9ed

Download Submit