ecd2f638f6994330b23fc82ac3a332b078f604e70d614fe8f5c245008b456638 | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14-03-2024 10:37

Sharing

Report Analysis Logs

General

Target

c8698bea845069d51264f02f07769218.pdf
Size

124KB
MD5

c8698bea845069d51264f02f07769218
SHA1

ac12086b94a753bbc5e743f9fd03eaa0576cbf8d
SHA256

ecd2f638f6994330b23fc82ac3a332b078f604e70d614fe8f5c245008b456638
SHA512

491025a559c4bdc500712f5e15691baff5a755cfbce8d181fd78a55f2e68489ac8ff80d39a0d62fbd45f4b39ed93e0f12e639b5a9bd1bfe15dc17388d37ca58e
SSDEEP

3072:+7bWiknZHkuWSEICAjnNQcSkk+zu7GtHPU:IbJknrWTAvRO

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2764	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2764	AcroRd32.exe
2764	AcroRd32.exe
2764	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c8698bea845069d51264f02f07769218.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7960f5f11bab28b0cb79ed9f89001966

SHA1
0197a92d07c59f4945ec2d589c7b96bf37909863

SHA256
2be91e427159cf0d906cc968ee1772575e325ee17f0a4bb64959c3c9940ed37e

SHA512
2401b0248a2a1efcee19621ad6d35169d0bcb30ea49da4a765fa8ef36e3dd34b1d6b5943299d6a7e02574f8b41ff0815c55166939584948e15614b3985a49d24

Download Submit