925921bf87f1a106e1a378ae739871b71270b8cc3eea6ba117f2e05b09737614 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-03-2024 05:07

Sharing

Report Analysis Logs

General

Target

bdbc6461b22bcca0d2b0e20034611804.pdf
Size

120KB
MD5

bdbc6461b22bcca0d2b0e20034611804
SHA1

35f6acec7f6162627936999430851f900d1d123f
SHA256

925921bf87f1a106e1a378ae739871b71270b8cc3eea6ba117f2e05b09737614
SHA512

bd19c713318c0e2175f61214cb6370df9f0efffa922e8b82485fb235b8ed2341b31b3d2414b53ef44579865c6ca58abc31aee36dede8c689ee974838f17e057d
SSDEEP

3072:RA+cIpWmnMeiTYZ2WMIOVO+AEGLoU01KopSn8/KHt:RnrpfMH29+Usl1K1N

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2516	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2516	AcroRd32.exe
2516	AcroRd32.exe
2516	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bdbc6461b22bcca0d2b0e20034611804.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
531a3aa9dfe079f4b3ffdbb10be01ecf

SHA1
38da8db4e5573ae0f1367205f29aa606d8804156

SHA256
a4e5aefec79c9cd6481af4247864ff2953609e6ac4563badbb2c69d918630591

SHA512
45123eb05bd48422e39854030f1b62fd171a7a16307508b480967eae69cdf3f21774e0df970ef43ea9e08fcee2f2e77165e2fa88571ca689a0784e70a78b3bba

Download Submit