d1fca8b6705f82fbfd8401cfa4a785be456323fce6058ac9632b02f0914ab3d7 | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/03/2024, 14:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

bb81ca25e7d2b9ae0cb5c6db98c700ae.pdf
Size

35KB
MD5

bb81ca25e7d2b9ae0cb5c6db98c700ae
SHA1

cd751f71731b57a975ec10534213326b9c71e25b
SHA256

d1fca8b6705f82fbfd8401cfa4a785be456323fce6058ac9632b02f0914ab3d7
SHA512

07a171991a149db1a9e3d8d384dd10148ef34d45c83af805ed1c1c55580cd216c9c1615d3cfffa82c8c9a487a827a5dc4b0d6f71e9f414229703849b70f75fdb
SSDEEP

768:Tl55KwCt2vbspPaWC5vTrBHtZY3LM2D+5:BiwCt6WCBrBg3LB+5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1976	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1976	AcroRd32.exe
1976	AcroRd32.exe
1976	AcroRd32.exe
1976	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bb81ca25e7d2b9ae0cb5c6db98c700ae.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5c1751b3264ca784dc79a24b6a3e8cb0

SHA1
16e28dcf2615d49f815d86072aba52053616b694

SHA256
b63e198f48b3859b9e232c8afd362df411c49525e93a2afcfa0a2dcf0cb54a30

SHA512
6887e79f56d3bd51cac5ad1c5b5760a96aa54cf0ac145d0bb0d0dd5e0591dd204c9c8dcb1134fb157ac4ebbe911974df05e47204abe22192ff0e1a3c22e8ff11

Download Submit