f9aa81cff11256d265a7f8296d63c7bc4e89f3bc432b1f6e696b8679c668c7db | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12/03/2024, 23:23

Sharing

Report Analysis Logs

General

Target

c45e9d39c9639f9c805601c2a12b6de5.pdf
Size

84KB
MD5

c45e9d39c9639f9c805601c2a12b6de5
SHA1

bacac91caa029d10c2f623136616afeb667e31a5
SHA256

f9aa81cff11256d265a7f8296d63c7bc4e89f3bc432b1f6e696b8679c668c7db
SHA512

1fb0f76f6f31edd19ca6530d16a8d947b11415b31e062f5078b7905f61fd67849b740d2e11cabd83dd61e381cc7737df6f276152db309ac016353859bd2c6b63
SSDEEP

1536:DnQLBXajqep04gi+Y8R/ds8IHWHpOvir39VAWOMMMUB9:LQLBKGepT8yHvWVPy

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3004	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3004	AcroRd32.exe
3004	AcroRd32.exe
3004	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c45e9d39c9639f9c805601c2a12b6de5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
204afa1d9274fa3148a07b2f17d53d8e

SHA1
c480523fe1b2f7d3e4a2dcb12ecca358f16ffead

SHA256
e66d8b04e5aa4e4e5c34517154e5f6b02a4bf7ab77d0992a8951761772fea80f

SHA512
c720dbc296e3ab188dd331415af005327b942cdc7ab857ffc0fe5103dbd4c86e37c7d9288217dccf85c95044794ce51831c221945bbf23ecc997db399cfbe236

Download Submit