5526a94282db118bda739d7274caff241333b10eefcc7e72ba251ce67562f74d | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
14-03-2024 05:47

Sharing

Report Analysis Logs

General

Target

c7d686a4dd07bf1b91825c0de03e4409.pdf
Size

34KB
MD5

c7d686a4dd07bf1b91825c0de03e4409
SHA1

931b1576e3511eac142feafc8a5cd1b914e985b6
SHA256

5526a94282db118bda739d7274caff241333b10eefcc7e72ba251ce67562f74d
SHA512

866db99430d51210c2786a27c73f256b6cf7a123b26050cebd7914d6992e0dee7c7fed84a20ddc9d39b10d346d7c06a84a3c433ae097cb18d1ae95825f2f3e44
SSDEEP

768:zuvxUyJPsIYJq1G+doec75FxqGt0KDI7aXhjIR6C:axUoTA+m7753Bt0KhFIR6C

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1956	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1956	AcroRd32.exe
1956	AcroRd32.exe
1956	AcroRd32.exe
1956	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c7d686a4dd07bf1b91825c0de03e4409.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
448a1395acec4c0556377c062cc3d9f5

SHA1
bd089045a1f3bef739c1ca83ddfdea4391299925

SHA256
4b499d8c73a7b8986debecb403989de446cc01cd67eaeee7d19a2ec3ba41367c

SHA512
5716052e810c56b3d2737321630bb7f5cdcedb6f7fa346e9e362a7e3519598dfc9fa295a7dcdb14367b9c7a0a0ddd00c1e978ef74512da783bc54cfa521698cb

Download Submit