57cabaa41815036bc8acfff53cd766dc09c049680bdf2abab57d8b02d41f7160 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/03/2024, 11:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

c8794e72f1cffc6627b59386f6e9987e.pdf
Size

85KB
MD5

c8794e72f1cffc6627b59386f6e9987e
SHA1

d3c71adcffc1a4ffbd7cef1f09dd48161a8beb9c
SHA256

57cabaa41815036bc8acfff53cd766dc09c049680bdf2abab57d8b02d41f7160
SHA512

4b36d22db1bfb22ea69be17af217cd2e2f28156a213c703380c2f1d0210b9753810a637ff6084075c8a22309e5f018347a9548ed00759e7e0aa206811f47d9a3
SSDEEP

1536:hDvu4IMGEUb5H8GDGKP9kdWGpOKCWRicjE+rWGnB6Cm:/CbV8Je9lKXwQDnw

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2292	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2292	AcroRd32.exe
2292	AcroRd32.exe
2292	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c8794e72f1cffc6627b59386f6e9987e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
450b83ef7028e78a96f49aeb82b70303

SHA1
434dfa0fcbd7ae03a41d2fb13a7d8ceabbf5789f

SHA256
ae94d1cfad5e53ba2e76b47130b286efb35086124b4f73cbd9cebc7d0cf9c9b8

SHA512
c9605d419050087445a70e018c6e59a523bff3ec0fa2da2c15bd69957d6e5d8c96487a41858b875ef79cccc8c80b92e57932db4bb772af74849c82e7566b0203

Download Submit