2132ff2540a05eb56112173891d719b75a011ef5db66d102361df67db63fee3a | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13-03-2024 06:55

Sharing

Report Analysis Logs

General

Target

c541e7e8841ea8144c5e8449bb7c62ed.pdf
Size

100KB
MD5

c541e7e8841ea8144c5e8449bb7c62ed
SHA1

1caa8966c371e1d2c34769c0f9cc5d1352963d83
SHA256

2132ff2540a05eb56112173891d719b75a011ef5db66d102361df67db63fee3a
SHA512

78cc93a67e1475e860a0167dfd6a4f18c9cf7ffdf99e114846d232f377bc0bdf44c06a07b7a81fb68dae2a316b59d2802cb67109cf7989feffebf75102111754
SSDEEP

3072:n8sMSm+U9NMQwCXpAxRj5rJ7g5PyrDa4ZSB:n8WmvitC2/j5r256P0

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1924	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1924	AcroRd32.exe
1924	AcroRd32.exe
1924	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c541e7e8841ea8144c5e8449bb7c62ed.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
920176dc506cffa6cb12fd72f69b9409

SHA1
5cfb5a4c5774c918a7a8d5aa55b3c3570638a38c

SHA256
02957316e06fa792261f0edc8c8f1add1ae110f03424bd80061a53a72be4cdd8

SHA512
28f02d0396dc8a6971ccae3f2d49d1ceb0733f68f7556c233010023bbc4dc966ddd8223466fa6d084d9e04319d476362e7dc1febf85d2a1a5f6af279cae78eea

Download Submit