9a44d23c6ec09e4c3af2725bbc6349cafb2c515d3957b36bd136213dfa177962 | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
10/03/2024, 02:30

Sharing

Report Analysis Logs

General

Target

bd6f214c6c138ff2443e8b46e65b3480.pdf
Size

33KB
MD5

bd6f214c6c138ff2443e8b46e65b3480
SHA1

7de3be7c2a3e6c778841a8c0ff9ab2efc71feff6
SHA256

9a44d23c6ec09e4c3af2725bbc6349cafb2c515d3957b36bd136213dfa177962
SHA512

f3bce6cedf192b3397650c3cf69c05bf69c6bf19ec073b4b8f6fb113fda28421ee439c0e2c90cb29f364bef68fdfe8a3bd0ff67baa4f1950e868804f39264842
SSDEEP

768:kRJFy8wqMIwl09ZSkVs1vVRvo1aXVAkPn3hQGrEZmW:khRwoI9RQkV7Pn3h36mW

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2364	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2364	AcroRd32.exe
2364	AcroRd32.exe
2364	AcroRd32.exe
2364	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bd6f214c6c138ff2443e8b46e65b3480.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
96032b232a3b281f4428ce74fc5aa724

SHA1
034c1fe2b314e35de0de6d846f0363514796777e

SHA256
3a734289c8ecf7fd236c42b6a5787be6d46659754eed7662d596309fac5ee990

SHA512
c1182600fa8d840c7f855c7460f6050cf6954429bdfab249441c28d9634fb53e7fe166d0587d49b5bfbccf9baee0bfef85d6d3754c16ba71fa9718178b6f4808

Download Submit