4f6ccca991a1183be5d8250cb9ea19328e8a1b600e4818aada24dc244dac76a5 | Triage

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13/03/2024, 09:04

Sharing

Report Analysis Logs

General

Target

c57d35082af435db184a3166c9ffd9cb.pdf
Size

101KB
MD5

c57d35082af435db184a3166c9ffd9cb
SHA1

c206ed306a9e466a471eccd43700110596239c3f
SHA256

4f6ccca991a1183be5d8250cb9ea19328e8a1b600e4818aada24dc244dac76a5
SHA512

327286afacb3738e65e09aeef9b0b4773700d51e9941650e27b0579adaac6d520d4306952f2896305ece4eb73dfd7d15d6cf0a943956493053e6a17427bd31de
SSDEEP

3072:bupTasmMiILR3EqeJEZbGpEFr1D02kfJh9wEG8:kTbrLNcS8Gh/W

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2252	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2252	AcroRd32.exe
2252	AcroRd32.exe
2252	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c57d35082af435db184a3166c9ffd9cb.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2a50141520c6a600d684f069cc64e070

SHA1
7a1e0164ffb920efa2039ec8fa1fc1cb1cfb8bce

SHA256
fe3d9bf3ea82154a61c8cc6e5caa7da29baffc52ff58b6eb6884df981f9b7f12

SHA512
195e0a907dfb5b009191858cd668310ab424511986f79373edb411d4f71d413e4c97b425d329cd5fa30f8519f8394e829eec5db623d332a71aac18e861de884d

Download Submit