576f75caa4fa95373bd23dcbab462fd39dd17dd0221cac718a4e01466f9d0d71 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/03/2024, 22:49

Sharing

Report Analysis Logs

General

Target

cc7424ff5fd78d7fa0d20f36459ccbd0.pdf
Size

37KB
MD5

cc7424ff5fd78d7fa0d20f36459ccbd0
SHA1

7aac379d7e4ca74924c5a9a54832e1cc85371761
SHA256

576f75caa4fa95373bd23dcbab462fd39dd17dd0221cac718a4e01466f9d0d71
SHA512

e5f87f8c62f7ef07024a7e13e727e3fbff6cf9f2afb7d836b11a3718f9f2bcaca1b45731a7c62f3821d3adaf842d87d80022267c91883f51f569cda20d27b1fe
SSDEEP

768:jouKhNoKjqtHQKK3ZT4bRFJRIj4ba7OEMPdq4exZM:FPtwqbMj4baaEYdUZM

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3068	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3068	AcroRd32.exe
3068	AcroRd32.exe
3068	AcroRd32.exe
3068	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc7424ff5fd78d7fa0d20f36459ccbd0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d7ca57e7a3add9e41b546a632fa36cff

SHA1
1bc2ea31ed8304ba68b94ddc45a34bb68d2bfff9

SHA256
163521e20623f2f6a1f66941588e6591594ae097637edfd41bc9296da66aabc1

SHA512
6369ad551bbd1a8805e95694fc90ffd2fc5daab71d11b003f906b61bbe806a99919ebb78f1611c73c28eb31931557d0b8aad5bcc98b97d0548d5f4372b216864

Download Submit