c5411cb649b4d2eda919a79eeda85937e25ab86465d7f94f2be5bfa8bf37d7e6 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12-03-2024 10:00

Sharing

Report Analysis Logs

General

Target

c3150468418deae5137984400e214469.pdf
Size

77KB
MD5

c3150468418deae5137984400e214469
SHA1

c87c792674e13ef23a80eeed5d56cc4b25bfd663
SHA256

c5411cb649b4d2eda919a79eeda85937e25ab86465d7f94f2be5bfa8bf37d7e6
SHA512

6376307f2d8fefa107674c39ce519b0f67d5a40f3ea15f8deefe72abcb8399f3e7d22e30ea671c5ddf602f9f15890e6a1e6ca4605e9060864dab77a7fe486bdc
SSDEEP

1536:hXkLqBGwRWLJT/soBTcGymk25/1XB4z1t+pcV5I:GqBGwRkJT0oBAGDnZ1XIuR

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1048	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1048	AcroRd32.exe
1048	AcroRd32.exe
1048	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c3150468418deae5137984400e214469.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
27c510f16b8f3b6f1f382a8ef11dad93

SHA1
c4f801d8f1bc047d664ace59a235a0a6812777b1

SHA256
0f5a5505d30d0fadb0f9ae2cc174d02d58b4f346baf8e9652ed9e3a3ba4ac93f

SHA512
73a09606ab0dec76d708f7fb9cb4d3127c0ee705841c163a97cdee49704f6e586e042ce9418175dd45b194e3b4e7675087e41051b2a219787ff17307af5a5df7

Download Submit