1066b38f3a6b423ad53b80967d9fecc741dafeb1945e69bdd2c7907685cdd7dc | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
14-03-2024 23:53

Sharing

Report Analysis Logs

General

Target

c9f43ca9633f450821522192ab0ccefd.pdf
Size

34KB
MD5

c9f43ca9633f450821522192ab0ccefd
SHA1

79582e25bd473cf4ca9a0c381d7b1b280d067012
SHA256

1066b38f3a6b423ad53b80967d9fecc741dafeb1945e69bdd2c7907685cdd7dc
SHA512

c2e634d10e2197069c99df4cbc1d686e2e9acd9cda0d9946455d95f80fc76eebab29a3db36750da25826ee0ef9abead8eb0af594020efa3a8482cbff78e95b5a
SSDEEP

768:wvY6j0vkjYxkGBBuEoC3rQDuqJkcc+u2PdXMaqO:ww6j8xkOBbBKuqMX2caqO

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2080	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2080	AcroRd32.exe
2080	AcroRd32.exe
2080	AcroRd32.exe
2080	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c9f43ca9633f450821522192ab0ccefd.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
dc0f953dba58c14e19b8923def5a937f

SHA1
eebb0b4b50d0bdb8f485fb2d3727800aa18ea53d

SHA256
5af0a78a29489c0815615d44c90934a701171b39316dea82746971741b8de504

SHA512
e65a1dfda0634a1b6c8efd3d91107239a2f7ec8cf58a975365af31816cac43f10d551e64636ae7ed60c26719363909a0f001b6e29187e0b2f46e492324d12a42

Download Submit