7e79f94b15aecc6fc2054886bdf641ac1432ae89acd8cf3143a0a32a6f26300a | Triage

Analysis

max time kernel
123s
max time network
138s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-03-2024 01:44

Sharing

Report Analysis Logs

General

Target

bd57071b984b1c10ddfdbe11dd27a0f9.pdf
Size

99KB
MD5

bd57071b984b1c10ddfdbe11dd27a0f9
SHA1

1507ef1beb944020020c7fa76fd3636445d50daa
SHA256

7e79f94b15aecc6fc2054886bdf641ac1432ae89acd8cf3143a0a32a6f26300a
SHA512

7bdd16324626365163066bc1381f96ca990b05a84e92a2baf6f80d6c1d1ed44e2584a67f117987fe9c4c0ee08e60717674c419bf9b9504b2de16b5b4aecdf141
SSDEEP

3072:K0EORVzGpUKx80SfpFfc2NZoPbZz+R9K5Mf+n6goGK:FEOR0OK12s9Ua6gof

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2088	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2088	AcroRd32.exe
2088	AcroRd32.exe
2088	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bd57071b984b1c10ddfdbe11dd27a0f9.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
cd9e66e3ec2a857b5ee6de6bb1e3b07f

SHA1
c5b5706dc5ad27b6bfe243aa52fbdea062953c7d

SHA256
c76966c8d6ef39d1134a36e85cfd981ca5052b392dc59ea586346dee51f041b2

SHA512
431d0ca8f93d8c0993cd28c2b38cbf0617724f8291c713af570dd949f1dc502fa0b61f723453f8f54d66b410137434958542f8429cac8154391d2b0acd07ef6e

Download Submit