4154131dc7f3a9b1f107790c2aeda303315a51c5b4efec886fd2fa3b09e7c31d | Triage

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/03/2024, 12:50

Sharing

Report Analysis Logs

General

Target

c0a1465e44d0e412b32af787dcc5e59e.pdf
Size

102KB
MD5

c0a1465e44d0e412b32af787dcc5e59e
SHA1

e4d317ec2486113f26a83bb3183fe535617d5763
SHA256

4154131dc7f3a9b1f107790c2aeda303315a51c5b4efec886fd2fa3b09e7c31d
SHA512

67d0ef92d79aa77f66d4ff141597d7082dbf39038428163dd040d36d4abf27bb17db13954403c28735981fec49d705aabf0e9c36e51911330495d89f6dc8cb6b
SSDEEP

3072:1IaAAlO8gmSe4jpxwBTxp8vfAQR4Ux39oJ+f:15/LYZtKHpGII

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2088	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2088	AcroRd32.exe
2088	AcroRd32.exe
2088	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c0a1465e44d0e412b32af787dcc5e59e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7a9391bac09c9217a908b0dda2343741

SHA1
c983ba753e559e14ce9522a05cb80208caec41aa

SHA256
f52ff01c46e9d01c22378e44f4c2b79e4f78e02d372588106831c738c5dfdb47

SHA512
2a8f3f0662343b073a025b5ea1016c1a06eade4a703be6e5c122e9e4fdc563870a2f7a8cca86830f52a8c3a164a503d1a3e275c7dc50d163f0e80b0d80a1494b

Download Submit