fba3a1cb5ed8dc80e539cbd6efa16989c1982d4872d830f108b2ff540f4bbfae | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12/03/2024, 10:05

Sharing

Report Analysis Logs

General

Target

c316d3b417af8cb156579571664c9972.pdf
Size

99KB
MD5

c316d3b417af8cb156579571664c9972
SHA1

7d11153be5f6687f6ab025e1375d1b94835d33e7
SHA256

fba3a1cb5ed8dc80e539cbd6efa16989c1982d4872d830f108b2ff540f4bbfae
SHA512

287d0953345b50f308b43a0919dc3bd002cb28f175e415ba033597e2e6fc0bfe456523cd2e1db3b6fa518a442a6b0999b1e13554bf46d994a7f52cda91a1896c
SSDEEP

3072:e5/iP7MYH2aletSa22Enz24l+qWwkyQ7M/:C/OHhl8Sa22IpW1a

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2112	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2112	AcroRd32.exe
2112	AcroRd32.exe
2112	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c316d3b417af8cb156579571664c9972.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
050e2b29ff438e7b16785916cc551c6f

SHA1
c97c891ee24528ae88615f7efe43304b5b827da9

SHA256
34f2a96c5e1459dbda81a2aba6b2d504f17d3acbc16d2574b4820e04119f0f15

SHA512
f3e5c9e28c8dcb1bd1a80629db8a02cc0060924d437422370ff8839f8d210b5d8f894d8a5535773706a023547bcb1667ed61353aa5293c4f932082228455a54a

Download Submit