564b0ac9a9d5ddcb1212dc3d52b6d07c2397f5b5f4b116a4e91af6b98b145563 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/03/2024, 18:10

Sharing

Report Analysis Logs

General

Target

bc780305e1d09b6364483584ef06799b.pdf
Size

43KB
MD5

bc780305e1d09b6364483584ef06799b
SHA1

cb4837ece0b6deaabf973376711c6ef63302d6ca
SHA256

564b0ac9a9d5ddcb1212dc3d52b6d07c2397f5b5f4b116a4e91af6b98b145563
SHA512

90b16c405d04c9f3b07b62c360f0879b348cb0b2fdfbec3c758de7ad69328e7fbaa42b026304aaa67584b3295f3808efbdd4e7ab6512cb70f11ecbf6023b31b1
SSDEEP

768:4xZry/ITX4Kk96SMzbbLm6JpwghF0eiuVtf2wYEhSI:qmu4Vim6HDhFHiuVJX98I

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1640	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1640	AcroRd32.exe
1640	AcroRd32.exe
1640	AcroRd32.exe
1640	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bc780305e1d09b6364483584ef06799b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1542fa3c97140ef1a0e40b80efbbebc7

SHA1
51f0525288280bd852086c4332b37ef5b02dd32c

SHA256
49c775fea0790133cc6da5cd18651dfc3ece792cd9cdde74c6573dbfd6a4c47b

SHA512
f4bdc7b9fc1d9464ee78340eee7edcd169e6d9f0142dc06ad874508be66890108253d9b996c1ef34044a1fa69138392a51c1f5df2406ff00f99fd8caf0d44e1a

Download Submit