825b126e905ebb4ca9a36ac4654ba5d3b75f80fefd778d35ac88881201e4ffc9 | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15-03-2024 01:14

Sharing

Report Analysis Logs

General

Target

ca1c1c77af206546dd5b1672193982b1.pdf
Size

59KB
MD5

ca1c1c77af206546dd5b1672193982b1
SHA1

4a184de74509726702de394a37961a03a12f0d4a
SHA256

825b126e905ebb4ca9a36ac4654ba5d3b75f80fefd778d35ac88881201e4ffc9
SHA512

1d15255b47967de7077541d7cb1af66b776d648218f6fdb4d5dade06602cf9036402eb3fccdddfd9c75b6aa279235547db83accf2e1ea2bd5ae607e212369fb4
SSDEEP

1536:ULfvnoqbUWFAq6MLb2Sjqwzt7X8uGMdWUQ:G/bQsAMv2BQX8urNQ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2184	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2184	AcroRd32.exe
2184	AcroRd32.exe
2184	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ca1c1c77af206546dd5b1672193982b1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
bf6ec21854cd13ed37c02f144a13d4fc

SHA1
48693b85b88e705eac7af4b2e8cc2022c8435ef3

SHA256
2cb06c69b708675b7ba77bb4469af879d686e1b794cffacfbc90c78f6c958e4b

SHA512
dc2c257442fd644b2ff759b25fe58f368ea62e37eb2172bd280164ce3b1e30baa3446a40d005dd735e2d322c564e596995c0483488dd595dbc0a02f1079ec581

Download Submit