94155cafa8745f2d52fa1ee390f4e362e54e10db5e1f7de4e97d502c3d3c83d4 | Triage

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13-03-2024 02:57

Sharing

Report Analysis Logs

General

Target

c4cc82af1b9d77f398e6caaf449a4779.pdf
Size

120KB
MD5

c4cc82af1b9d77f398e6caaf449a4779
SHA1

554e5f2ca2e26b15a94190fa7c7eab0d348888ea
SHA256

94155cafa8745f2d52fa1ee390f4e362e54e10db5e1f7de4e97d502c3d3c83d4
SHA512

22f1ee4f78021ad9140a76f893db04958f4d2511479f01d0c80b318bcdf336a372158f0f414649354d4e34c6bf291852860140c40804c1be3551cfeb55b7085d
SSDEEP

3072:zxhYOhgFN113OtPcNNkoG8TPgo2XgFo1rTTs/e:9rhuj0+Wcgokh

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2916	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2916	AcroRd32.exe
2916	AcroRd32.exe
2916	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c4cc82af1b9d77f398e6caaf449a4779.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0e9b63591c6b9b51148b2740efcb426c

SHA1
80b522cc811c4fc12585f1bfa796f16bbb927cad

SHA256
098616622a00d106f434f6a34eb4345895d3cde7a9064675135839606af45f30

SHA512
8f63cf51468984ed6a5b53869bdabeb265a1178e755626a23a4e6e282ca775f6e8be3c1841cac376d870174b79ac78a69dafea2c23e7d04e9170e79436cc47f2

Download Submit