7ab20ca0107f85b5ec838b76474e2c49f1295041f637f6c7130b745acecebf8a | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/03/2024, 03:42

Sharing

Report Analysis Logs

General

Target

Stamps/FOR PUBLIC RELEASE.pdf
Size

6KB
MD5

01725f8548e35ef8d7f5b6702e9bc7b9
SHA1

beca1ee02f43d01c97d00156f4b26a748cfef24a
SHA256

9d9ac71b16274f63505dc3697a366c7d825f7dcc52cac59252ad173b5db64693
SHA512

d30f7afc9e329f05c41e9c8854eb0214fa97aa6f76c59e5c96cafdc40ecbe634f225fac6b580f62d0bad998b63188064e4e12aa6f2697810b483f23efd6696cf
SSDEEP

192:zTj/EYTHa06DvYZz/z18wy/cgmChu7vjGiVJ:zfVzlLy/CMijGq

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1712	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1712	AcroRd32.exe
1712	AcroRd32.exe
1712	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Stamps\FOR PUBLIC RELEASE.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4e8f939e904060984330c9e8e0ee962c

SHA1
b2531899711d73f0a48f1d28bbe4d38134952902

SHA256
c0c0e0573f20f9f046b821bfd1a5ff55fc3de9d91eeae2111dce99575a185a71

SHA512
721ab15abebf64bfc821d92423e2599cfaab2eb9383403077a615a5745e28ee0e8d44ce5a3387cff29bc314049bdbb64cc30ab226fdd950a2f5ed923f49a3ade

Download Submit