5483f38d2c93917596a8e5bd3cf1f55d61f2199f5e973d29170fd1916b20c3f3 | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
13/03/2024, 03:15

Sharing

Report Analysis Logs

General

Target

c4d54429dd6d60ffa3c65e3e67161013.pdf
Size

139KB
MD5

c4d54429dd6d60ffa3c65e3e67161013
SHA1

d473e71786d5f9f039a8676dfde19cbded3cd08f
SHA256

5483f38d2c93917596a8e5bd3cf1f55d61f2199f5e973d29170fd1916b20c3f3
SHA512

cb900d2e5ac7a66cc7f59b1d71ed23cf3ffccd847900dd22dd0b0260ec5106711fbbb7bb3f5c94bbfa12855f600c19ee0a5e08ce7eba6a1213321403b2206e78
SSDEEP

3072:khx82XuA1RnbSW7zU7H/4iwdLY3lrictqQew7mxGv0:ev1DuWAH/4HE3FJs

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2316	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2316	AcroRd32.exe
2316	AcroRd32.exe
2316	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c4d54429dd6d60ffa3c65e3e67161013.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
700ccc16e2b8f6c7705f7447b7604d65

SHA1
a935ffc3744079c35d28d1742cea4a9289ebca9a

SHA256
2a707c8565dd4813ac48064d564576365f4a8375e1b5bc86c0c222cd0acfb2df

SHA512
64870b2aa122290bdf8a9470bcb9fef4aba3de6cdce76e7e08abbaca9fe4a5015b9a10eeef7bd257aeced243b19a7dd2c02b64f6804ed75b131b3644a90ff16c

Download Submit