7b4265abc4bc582eeb3640f387462f4877b460a10c22f614696b6d7081b9e843 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/03/2024, 03:57

Sharing

Report Analysis Logs

General

Target

c7a0a8eb2539716f304bf4fd485b39bc.pdf
Size

112KB
MD5

c7a0a8eb2539716f304bf4fd485b39bc
SHA1

3c4e0e1ca7d99f692a58b64edf3a1e80c373d1b9
SHA256

7b4265abc4bc582eeb3640f387462f4877b460a10c22f614696b6d7081b9e843
SHA512

e5a6b884b9eb2e27023161824a50dc65c6604643ca5fc590339c0a14369d0986e2d144a10a671699db3910296bbcd111db88779457052baad79390cc56ad928a
SSDEEP

3072:1ka3GOtldY3HWy2YZa6EPmHCypqF1ttlil:CmrDY32aZan9X8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2208	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2208	AcroRd32.exe
2208	AcroRd32.exe
2208	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c7a0a8eb2539716f304bf4fd485b39bc.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d07454a3cdb5c2067a77e347c6613c88

SHA1
fdf36dadfcdf7384d5d59162035f464644ce327c

SHA256
402c3eb0e4a1146eb92281a0a61ab50cfc663c45a50cb54b202865746d9e0175

SHA512
06e578c9b0f14508f25eb1be9b85bc759a7042cf6b68edebaf3426c074d395dd640357691c8fc5ba373a0d98ce237fee0e19f13f3cbdd55e1808957b05d1bef4

Download Submit