2b520e9f3461c77ff274df191ad237f40248274b463726ebf3708d64beefe9e3 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
08/03/2024, 14:19

Sharing

Report Analysis Logs

General

Target

bb7ae36b7d56d5b3ded4d3ecf7909eec.pdf
Size

106KB
MD5

bb7ae36b7d56d5b3ded4d3ecf7909eec
SHA1

19fb9e8692b0916b695f3137f6e0183e455f743b
SHA256

2b520e9f3461c77ff274df191ad237f40248274b463726ebf3708d64beefe9e3
SHA512

929282f30c6ca2103a310d83873d1c61173162c8c3e58f5ff5666aa15c747a3b25d3aebe17abfce38cd32bb15f5d537b50f0ac14e2939b9c87e7f5eb6e0f20a8
SSDEEP

3072:xfL5EzSvSIFBRwdpTvap+nWVKiwa4yJHYtQiiFm:xCS6+w3+8WVVwzyT0

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2068	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2068	AcroRd32.exe
2068	AcroRd32.exe
2068	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bb7ae36b7d56d5b3ded4d3ecf7909eec.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6abf436a7aa7821b43b24cf591d697c3

SHA1
d36e3d31fae2ff3fe0c672a5fecd70d412bb6aca

SHA256
229d2c60016731c37eca8d319a7d0f7247499c54d2bc6d2b3f29b48aec686b10

SHA512
23886a138bbf026684eada3a2708874b09d728db3d75df93a753cb9a403bf1dcc037e5eea5a48f4a3a8dab8f3e5328e7fb45c95bcf7809170af04dc764af85a2

Download Submit