f33aaf6f679a16b6c96c1119b85fdff753e52b2400863df7406b4856cbe3c75d | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
12/03/2024, 09:50

Sharing

Report Analysis Logs

General

Target

c30f8b87abb8fef692833e7c818fe66b.pdf
Size

111KB
MD5

c30f8b87abb8fef692833e7c818fe66b
SHA1

af19cb74e3c8517200d640cd2cee1c86e2ef0776
SHA256

f33aaf6f679a16b6c96c1119b85fdff753e52b2400863df7406b4856cbe3c75d
SHA512

f7ed1ee67cdc47891bfc33af6ad2428404cbb90be5eba1f2e159699781e7d029b9066e15971e2061d0f2f6889f2d042fc8bba10ddf8b1d832b58ee024e4eec0b
SSDEEP

3072:pcPhYBnvj+YLMcu9M3jr+KapNG2FVtE/EQAfbNMg:2PqBaYLlf3f+Vq/EQa

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1772	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1772	AcroRd32.exe
1772	AcroRd32.exe
1772	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c30f8b87abb8fef692833e7c818fe66b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
816220ae4c914877113d7113959e0b88

SHA1
691fd5c30b1e6d8f280ea466f8bd72695a7c80da

SHA256
1632b87bc029a8ffe2112ffe9f76c717aa39c824b6b16853d0ee9a1cf80fa500

SHA512
617d6e5ce574061f01a7c1c9f76d76f737bf3b828956005e907645e79fbe28824a1b2adf196434aa95e126732ddd5e3ad101a57dc0dee0e8e25ce70cf236ede5

Download Submit