df92c1fa86014e99a0ebe6c270a91bd0f111808612d95628568e8e044262c97c | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
13/03/2024, 05:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

c51f5f13005509001b5c4e87b1187ca0.pdf
Size

32KB
MD5

c51f5f13005509001b5c4e87b1187ca0
SHA1

6a79a12e46b25b82a738b4d9a7d9b13c23544370
SHA256

df92c1fa86014e99a0ebe6c270a91bd0f111808612d95628568e8e044262c97c
SHA512

56d88433ca646353cb05d62c9f16c5973786fc8c9cd732e5957e544d4ccda3854c399f4f60f9d9c54b9119921643181e3f09d4a9548b3f2bd128b630aa50341b
SSDEEP

768:Ym/ANhuhHijLIuRMeSUQPVxEIW2hOQIwsFTAE:YGACFvOIW2GFTAE

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2932	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2932	AcroRd32.exe
2932	AcroRd32.exe
2932	AcroRd32.exe
2932	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c51f5f13005509001b5c4e87b1187ca0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
68798b67b31c1157c43d5d2668fbbad5

SHA1
73dc777262746485476c4b607ffb421550bbee28

SHA256
5fda426f3f5e82b15ba6b8eb978839d5449ecafdc0fa775a857bc7780f0cf762

SHA512
fb6979aa29f0c565256e7247e23097456e334116ca058ec041da9fee8ac2e8803eeae6efd6fd92afe3a8bb83b83dcfed9f5bc1b8646bfdc294ac11ecae851cbf

Download Submit