4a253a5f8d9ea1bab4ece1e06e60cc58bf08a7c19efb6e9518ad1ddc18e57fe9 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12-03-2024 13:19

Sharing

Report Analysis Logs

General

Target

c3775f7832d61297938d7265472a46db.pdf
Size

99KB
MD5

c3775f7832d61297938d7265472a46db
SHA1

152b12ea86a593d0a45d33f132b3bd051510d3b7
SHA256

4a253a5f8d9ea1bab4ece1e06e60cc58bf08a7c19efb6e9518ad1ddc18e57fe9
SHA512

828a9ff9c29c2869013c5490ee29c3321327859e35a04d23c2f8dccaa5ee4d3e76c90d25ad164f02e35d55a56dad238dfdf557001655b0c833ae03867ceab319
SSDEEP

3072:wQkMVcZS1tFddJ0J4zVfZ/ufVjJthc2kI:uM+ydbufVlX

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2240	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2240	AcroRd32.exe
2240	AcroRd32.exe
2240	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c3775f7832d61297938d7265472a46db.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7e9c139b30f17e24102c13564a69ec3c

SHA1
273e1ca2a487da114929dce34a7e3b19a3207e99

SHA256
0c84d9f1591b2c1d3e3c3ebdd53e84455ebdf95c484f263d6b6b8f1c1e5c1a6a

SHA512
ab469764ef83323300ad6b6f29a4a5a4e6c380dbec5465db6bf89a9e71996ffd78f01ee95b803e08588ba609ee8dcdbe1e0a71bc07beba986ae5fbb108008b50

Download Submit