039217eb8e025e544089691dbfea93813b559939dae8dbfdd7f1c48fa0809e63 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13/03/2024, 04:42

Sharing

Report Analysis Logs

General

Target

c5008b6f36e4391a1b25eeab9ace01f8.pdf
Size

36KB
MD5

c5008b6f36e4391a1b25eeab9ace01f8
SHA1

937acccc4e2f55a3fe841c54eba6c854d00ee7c3
SHA256

039217eb8e025e544089691dbfea93813b559939dae8dbfdd7f1c48fa0809e63
SHA512

c84d6e41e1421e914c9dbe8934f0167998c8202d8f01fde3294952a26868b752e1ef50bea4cf70f69b445a9ad44ebcc06c3cd3be0ac91f8d1a4b2b0f74074578
SSDEEP

768:UblxLHsODB2t0e5Uzk512JevykUu8H9sIBSeKt:ol9ReRX2WT8HaeKt

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2356	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2356	AcroRd32.exe
2356	AcroRd32.exe
2356	AcroRd32.exe
2356	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c5008b6f36e4391a1b25eeab9ace01f8.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4e7db64e3017cf86f91155af822ea5f2

SHA1
ef851045aad648884c6e3c83babc6884c212ca4f

SHA256
bceefea6324084a172741072664be5febf6a72ea3b41f3b08c93810b61830012

SHA512
d9a8b15c255e4b0fa9249c7b9aef622ff043712fa32d246028f43c9ae2cda6ccc2867875fb77f901e3a574e663eba7df2335aa6870d37ec6676c709977fefa57

Download Submit