db7bc6f305c78ce76a0ff06f6e5843223d5477e8491c53c4ff32679d162dd192 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/03/2024, 23:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

cc94091b90a10d2585cea7fbf74a55b2.pdf
Size

33KB
MD5

cc94091b90a10d2585cea7fbf74a55b2
SHA1

79da8103daeb462602093d0c97780f8cc976124f
SHA256

db7bc6f305c78ce76a0ff06f6e5843223d5477e8491c53c4ff32679d162dd192
SHA512

eac56bb60d8f3b6f72705ecaa26d3918128f378b22dcd90ecadbd91bb6b6e7302ab22b990f477f663b20a568df80b8f77820b868152a4f1ff4f1c805a9723c97
SSDEEP

768:LZUDLwFQJ8sSP7G+Jb/uDKKyPWwzrLbzln4+TbN:tUDL4r/uDKKyuGPFn4sbN

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1948	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1948	AcroRd32.exe
1948	AcroRd32.exe
1948	AcroRd32.exe
1948	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc94091b90a10d2585cea7fbf74a55b2.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ffae93704931bee108f99cb5c12f731c

SHA1
36172a3becef394a73a3d92fb4b25557ba691aff

SHA256
d1c1b30a9a635275198f3b3d9a7cbe11c06b029f4c41a3247c94108b5c18b8c5

SHA512
391b3675e9c0697267536fb05734262fe41e1359f8ee9875baaaeb2581a819a8e2c46ba9302242d87cf9ad039c334266261cc977c8c91c39e29919af948e41db

Download Submit