675cfc913adf5a684a5bfcd680687e306c11a78f1416dcc03ee3715096c11293 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12/03/2024, 01:48

Sharing

Report Analysis Logs

General

Target

c226bd91318a03a708f346033df108d7.pdf
Size

2KB
MD5

c226bd91318a03a708f346033df108d7
SHA1

d3bb78975540fb38b1d5a282717edc3faff00065
SHA256

675cfc913adf5a684a5bfcd680687e306c11a78f1416dcc03ee3715096c11293
SHA512

460c0dfd7a4c4cf28024c30b6d1ef70222f0be7554afd6678b3e515ff2d638df87ddff3a7f5cdaf25356dd0eabde7c893027b2f3d4cb6eae91a6541e1ceb6e50

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2216	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2216	AcroRd32.exe
2216	AcroRd32.exe
2216	AcroRd32.exe
2216	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c226bd91318a03a708f346033df108d7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f39f3bce02b42f63243ad88e52142cdb

SHA1
9ab7db78a8a52dd942e4a71e1a0be4a33d9b2a3b

SHA256
0701260f8676499175bc84bcea3ad0391fffcb219a3cc2e8da37140c6111fbe0

SHA512
e7fa7b798c914d734b38eb263b8633e73ca68acbd970e97106d99ed2fc3de44c71092f615e7568c0bd364900b433f49010945bfcc3e36a1ce562ed39b5cf9e2d

Download Submit