167687d79c23aaeb951610dff3611d6e1c83ba9afcb30529714d7f6d1f15cd6c | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/03/2024, 11:23

Sharing

Report Analysis Logs

General

Target

be7bb7433d866cdd791f078eb11d40b7.pdf
Size

35KB
MD5

be7bb7433d866cdd791f078eb11d40b7
SHA1

25b8d960abad11eeb585160c855821cd9d9d1911
SHA256

167687d79c23aaeb951610dff3611d6e1c83ba9afcb30529714d7f6d1f15cd6c
SHA512

63c38cd1322318a633cce0c29d0baec003bc2d9720755ba0b63d05cd300936b92f75b19637e6825ad42dc233e484504ab01fb94e8f24e3ebbbe9e3a7222a0868
SSDEEP

768:285gPB/Jsu2LE9iM6tpvd5hQPwvmsLoy/:r5qq1tvpQPwe7y/

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2232	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2232	AcroRd32.exe
2232	AcroRd32.exe
2232	AcroRd32.exe
2232	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\be7bb7433d866cdd791f078eb11d40b7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
3454bc093ae2f1779106961716177573

SHA1
48752aaefaf48f120da5e90832ee2f2625939dac

SHA256
5358401d1943acfa7fd7ca2d4935b38cc871e593ed06be5c16d6a0d8a396b240

SHA512
f62f8070ec448b59ced0a4860300fc561b4dceff9b5517e9fb9a4039d103d6ba0b6b5d7d5ad82d007a06987ca0e454168cbd452cda6a1e88e69e801f68911e3c

Download Submit