578b12df89aadab0a2a6ccb5bf03ca4f44a417ab197b07cf975443f36d2d8c41 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/03/2024, 08:08

Sharing

Report Analysis Logs

General

Target

be18f4a9375edefa63d09154b89b53fd.pdf
Size

39KB
MD5

be18f4a9375edefa63d09154b89b53fd
SHA1

358bc62310d0bf900b089018e483b0feae0207d2
SHA256

578b12df89aadab0a2a6ccb5bf03ca4f44a417ab197b07cf975443f36d2d8c41
SHA512

66299b51f49f853b2a697f278e8739f66c290cc96c63937f00872b8672a1d6d01c625a67a95473f057de73ac479b83ef7844af02dd1f09ce88162f29d0a2ee18
SSDEEP

768:GgGzpDKmCnIrInxH47Cy6p21URyMUlRguPTrMaXt:TGFmGyHzOnlauPTrMa9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1336	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1336	AcroRd32.exe
1336	AcroRd32.exe
1336	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\be18f4a9375edefa63d09154b89b53fd.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a59a6220539b2e2e33d1ad9829473595

SHA1
7ea006729a2f39ebbfa7a79a1f6cff975dd8d09b

SHA256
afa3667ef6f822232d8128739cf353419d709f3cbf53771f15507d72cb75fd0d

SHA512
1f060df949d2ae552319a81d5339e40cbeca435a4fdee7f88f0a431ea7f3f3481449d38d0c39d4b023b860a4644f88cfd0c523abc90dc0f0c28b961f0ebbe8c5

Download Submit