7fc7287c58bcba1980a8699160b4a4c940104c8f01838079f0912c7fa47c54f5 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/03/2024, 14:26

Sharing

Report Analysis Logs

General

Target

c0d12a9da61059ec30b75fde73125486.pdf
Size

105KB
MD5

c0d12a9da61059ec30b75fde73125486
SHA1

24e62c7bafc421840acff506695dac3494ac328c
SHA256

7fc7287c58bcba1980a8699160b4a4c940104c8f01838079f0912c7fa47c54f5
SHA512

623b1a78ecb8509b8775b82dbf56ccb1e31f5af50ca0b4cfac9a1ed6b5f32a2bcdca2d18190348ceebd70991e9eeabdb42743893eb72a87ea6d71d050e7043d1
SSDEEP

3072:/BAgnSI7h5LmVK8fz0FLLkLzcfUIa3ayJ:ZDV5L8DuLBfUv

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2928	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2928	AcroRd32.exe
2928	AcroRd32.exe
2928	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c0d12a9da61059ec30b75fde73125486.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0fa214443c29c16fb963d157ba4abbbd

SHA1
ddafd0ce6ddd186f0f5ba7627126592ec404decf

SHA256
9fb703bc69a11b74c420ed6871d8dce5d3e51c8f8f9a2c60772dbe30ef1b9368

SHA512
c767fabcae8e49d9159edb5ad324ea0ed060e896e430becd5e87faa2b9cab1a7aa575118716a3c97b9a7c769356ab6809cfbe882b7c4bf20a10e8822d37c4f21

Download Submit