4f3561ec5dc829898a2213b27366f41d7b975356b96d32b44a763115981b9c62 | Triage

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12/03/2024, 13:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

c382f37b49eec7c8c249f0de0c934895.pdf
Size

73KB
MD5

c382f37b49eec7c8c249f0de0c934895
SHA1

b6170b5c2a1c8c05680aa586c273897d22801ffe
SHA256

4f3561ec5dc829898a2213b27366f41d7b975356b96d32b44a763115981b9c62
SHA512

1a5f8107ff40af51e808dcee98bcd7a5fde8c5e513cc14bc6ae0caa4d2564430676d46cea927bb86c0dc44983109507b92c3ec8bfdd6cdf132ab16e6eb0f4e97
SSDEEP

1536:LgtoovkJ+AyXoKD9Hv1rZel2t0GFKwrAKER+Pbx/oy:4Bvuwh1leMeGUwrERSxd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
856	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
856	AcroRd32.exe
856	AcroRd32.exe
856	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c382f37b49eec7c8c249f0de0c934895.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7ea5eebfa2bea2def4a776bdf53cf32b

SHA1
28fe1a90a2eba67bc6595cdc2b51378796134b01

SHA256
a13b936aa58157e5972e2e0dd17f93e2cae3dd6404c45a58457021dedd9c0174

SHA512
c957bdf7b6facaba9ba2a64ec45c24a9ca1acd43c8b42a783c450faffef13576170bcec2deb6e2feaa0f6b1cc4ce553646ee17423d4b711160d380ab937962a7

Download Submit