e69c164732a93246cda150190eded4fb7f7d1142918804d4fa0d7a17e73e748e | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
12/03/2024, 02:55

Sharing

Report Analysis Logs

General

Target

c246b4f0e61f4bc5d70124b3eb7c1f51.pdf
Size

34KB
MD5

c246b4f0e61f4bc5d70124b3eb7c1f51
SHA1

d1dae10fde9c26153679b935e8730626bfa27027
SHA256

e69c164732a93246cda150190eded4fb7f7d1142918804d4fa0d7a17e73e748e
SHA512

fc72b39e8b117b89468140bdf0b4d32b40d6e3967fe10b7d82149b6dd5923dbeb0514dfd31b4c4ed3329f6c05e97ac161091612e45cc9d95fce72c197d287996
SSDEEP

768:op7C9yb2NSUflLM4dpm/RLEE7NhoKbzll1/1wuUdk:S7CEAfl7CQE1jWdk

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2364	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2364	AcroRd32.exe
2364	AcroRd32.exe
2364	AcroRd32.exe
2364	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c246b4f0e61f4bc5d70124b3eb7c1f51.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a989720d56ebc7da74bff3b27b660290

SHA1
3ce8081e1996cce75938f450be62046d39a10eb5

SHA256
c3a5308dec164cfd3e1588e7d01f62f7527603f73ce54c4d57bad71be71c49b1

SHA512
58990cf3f57f734abb42158983ab01c900f2077f569b8919332a26a85c2f8742fe55e5d74f6a3423ebc1af708f32f39358440e32ffbe837874c4b654e7fb7ab2

Download Submit