5ec9db56f22e9ed25de2c1d33bd7357bf6ca557b6972d8705521eca88868a64d | Triage

Analysis

max time kernel
119s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13-03-2024 23:42

Sharing

Report Analysis Logs

General

Target

c724fb5415e8dc81d282993e34a1523e.pdf
Size

44KB
MD5

c724fb5415e8dc81d282993e34a1523e
SHA1

6af2c295ee4fe75ca429434596719e7f3ca904ed
SHA256

5ec9db56f22e9ed25de2c1d33bd7357bf6ca557b6972d8705521eca88868a64d
SHA512

a9fdd962e732d3fb829778fa6f4792c16150932fc62583a2151b3fd0cf5217009b2fd578f48d148887bf313094525df85caecb21f62d6fb42ea1aa59086dfdcd
SSDEEP

768:jxp3x1zb5SVUJ8JblS2VzqdV53UQZqxZjgzKWSJGRg:lz1z/T2EdVVqDMK/4Rg

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2384	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2384	AcroRd32.exe
2384	AcroRd32.exe
2384	AcroRd32.exe
2384	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c724fb5415e8dc81d282993e34a1523e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d857bd5499adc75ca394849f010b2557

SHA1
e5f4b870cec9f1558947b603b107b48e8ee79a2c

SHA256
a0529bdacd7d2a9d2bcf46348f34100be8269666f3323a87cc95a5b3f4a20a94

SHA512
7179ebcd099f9b1025bd16cae351c21b73be173ab4f3c082463b675ab9e24619f756e2627f789c6583e901d04db80ce8f834f0ed91ea1a57bdf016be1fb9fc0a

Download Submit