3afe2d4f17b2f56580e4d952f48bca0bb89118d07f266710437b098ed27c3bf8 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/03/2024, 02:17

Sharing

Report Analysis Logs

General

Target

bf94859d5a8ef99a255b948cba0ce2b7.pdf
Size

33KB
MD5

bf94859d5a8ef99a255b948cba0ce2b7
SHA1

c803016c26e4bc604637909ff409771e1d58e4b3
SHA256

3afe2d4f17b2f56580e4d952f48bca0bb89118d07f266710437b098ed27c3bf8
SHA512

f6706cc6706d0c238a33a4c364201d6405d0cdac694b547df45b5a15806519301f263e22ab337820ccf86d0404580ad717668fee718354689e721109d0332d96
SSDEEP

768:Y3EeA7lFwEiGDZ9O5/uGc2C2v8CjD8utDoAp4e0IFg:Y0eBEJ/+4SD8sDZp4IFg

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2004	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2004	AcroRd32.exe
2004	AcroRd32.exe
2004	AcroRd32.exe
2004	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bf94859d5a8ef99a255b948cba0ce2b7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
36730c35453a2f3ba083ccc3a158f042

SHA1
52ee3e741d7e8fee44c56752148a20ea615b1cd4

SHA256
6f1f48595c842944111bcebb8fa66b4705282aadcf1be8b94126d3b02e1f9d89

SHA512
96da91a927f788ff55eb5a69d3e0147e7a2995deb15754061224732f952b90456bb0487c818e6ff785020ecb57acce7bc58ad3a7a3d52223cb98f2dc42f2fd85

Download Submit