7482c2c434200e473515b145f3a5462e664b24b5b2a529011298eef3c7194aa3 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/03/2024, 11:50

Sharing

Report Analysis Logs

General

Target

bb2ff18e5821442fd0a9038cbb045d00.pdf
Size

50KB
MD5

bb2ff18e5821442fd0a9038cbb045d00
SHA1

eb7c4035c9875fb678b14a74d74c1f37cef05f6c
SHA256

7482c2c434200e473515b145f3a5462e664b24b5b2a529011298eef3c7194aa3
SHA512

028e978a28b044c306963fd94fbcab19f4619a9b48e05fbdf7d057abcd63f51aafa8f51d5c270833376274c826a0fadb8c5fbb822dd1ef1598dd00d71ba02ced
SSDEEP

1536:d761mXvA1Mr1KL/6O/Afpj5UUNKMhe+4Lpn:um/7cspjHx14Lpn

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2016	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2016	AcroRd32.exe
2016	AcroRd32.exe
2016	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bb2ff18e5821442fd0a9038cbb045d00.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
61c79b9a7847499d26f25aaa936a01e6

SHA1
4248b5c9a3eb592465b305f29b8814de87a19ccf

SHA256
2eed82ce1403587968591cc9b1ce3cfea4b85790dd33ac6275869fb1076b1997

SHA512
c6fa9e0be191e06d466bb3e32fa8d08f0918614ef005ff5fdeb2f1bfdc24618cd4b234917c7041aa84373a38d72ea33327cb5370f7639104e9327b24773f6cbe

Download Submit