4057623e5ce4a7d5e2d882b56635480d984145d829f74f00c95b39db0c48a4d9 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
13/03/2024, 05:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

c50ce94ae3e04941a2ff75b537d4625a.pdf
Size

34KB
MD5

c50ce94ae3e04941a2ff75b537d4625a
SHA1

e69fc14b8447cba5d196feb55d53a31b15e686a2
SHA256

4057623e5ce4a7d5e2d882b56635480d984145d829f74f00c95b39db0c48a4d9
SHA512

00bc5611c05ad7069e85e48591ad0b80ab79578b9f59a80988ff0d859638f79f55a0c17d8579e4d5cc96411e149d7bd5a63255ab6de8e3a67b74e0485d3e12c6
SSDEEP

768:g2sD9s8JhMggW4OzOjIzVhllzv/lgP0NxBZl:m1JhMgggq05hllDCP0NXZl

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2912	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2912	AcroRd32.exe
2912	AcroRd32.exe
2912	AcroRd32.exe
2912	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c50ce94ae3e04941a2ff75b537d4625a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f223e9aba09711298f365cd56d4220f8

SHA1
3ab0998377c70ad8640b646911ee3f6095c1c666

SHA256
7e9a38632ebfa9e5bdf7f97500e450d056d44b4cba2b95a52588c8121a447ac3

SHA512
23be44c79b41c6e4b5a0b03b12a87a23044e87c4a5aabef20e2cc2e884c4aed38e1a07cf7be33a9dc027200decf5a7388f515212db56c58e2c0b2cf88e839a9e

Download Submit