ad77d8d8855cea3e6b8c4068ce8026f8cd88e083a64c233e80ef67839058e54b | Triage

Analysis

max time kernel
120s
max time network
136s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/03/2024, 04:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

c7af153ca26c4ee2a55eb45f73ff9867.pdf
Size

33KB
MD5

c7af153ca26c4ee2a55eb45f73ff9867
SHA1

c8790daac9e08dd63bd6dc9c8f492bd3bcc37cba
SHA256

ad77d8d8855cea3e6b8c4068ce8026f8cd88e083a64c233e80ef67839058e54b
SHA512

0cf2f11ef5aa25bd21afa5a1bfbe17e8dbf4fd61a1fd8900e6a7fb9a6246d79eb5b3d0887382dbe659087eca7c040732ebe3f269d66add5666193166589eb3d1
SSDEEP

768:+G+HbTvhgJsbWFvxYZgVcMaM5b9r2h+U+9MP7G:+D7TvHyYZg5ZFUn7G

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1652	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1652	AcroRd32.exe
1652	AcroRd32.exe
1652	AcroRd32.exe
1652	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c7af153ca26c4ee2a55eb45f73ff9867.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4465d6934923fa7a107dd1405d947dd3

SHA1
6e1876adedac0e42e9833881431bc496c6445d6b

SHA256
07a93bce35292e416d963cb6edf67170e2dd248ab74ea80c3908612b655bec28

SHA512
f08fff473431145b58d1f29623d843231db8697559e7522071283be3140f8be19dc26cfb46a97472adbc9b7c1739bdd077c352219a58a0d28e02349c8afd2d7f

Download Submit