646d6add472eb2209bead5488440cb9c8685d76fe4e7a45bff42616cc1cf856d | Triage

Analysis

max time kernel
120s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/03/2024, 18:48

Sharing

Report Analysis Logs

General

Target

bc8979cc74f8fc2449a26c883fd75096.pdf
Size

104KB
MD5

bc8979cc74f8fc2449a26c883fd75096
SHA1

0b23078b7af0cf70c4c7eea04dfd7e4f8a7db2c0
SHA256

646d6add472eb2209bead5488440cb9c8685d76fe4e7a45bff42616cc1cf856d
SHA512

a3a2f339540939c9a47b121fd3972a5dfc01fc24d852743ae5a571b1918b59d7c83e5c7ac4d1d24ab9d507bc0993f9312900275ce2aa3925705d81ac9be9d67b
SSDEEP

3072:zmIuAhSFjwnlZptEH2/FLIENEXhK7t6RSAos:bNhSFqlztEH2NMe65

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3000	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3000	AcroRd32.exe
3000	AcroRd32.exe
3000	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bc8979cc74f8fc2449a26c883fd75096.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e31b75446427fa3366c7bc6083c0909b

SHA1
ef5f63497469bf30c7996c499372b9bfe50a7b83

SHA256
152314849ae412657bc03622aef9d9383fccdeff76eb5f2e661b7cf23e8c8e6a

SHA512
c748a5826167a89962c1df951d01109c200b83362d603821f1f2c2848273652b838de1afb2894c58639488362a8647d8c1fed8692c24f2f000e2045076d131f8

Download Submit