38c01d54b404940afca9bb8922fce0699d6e7ddd7adbc4864798bb7bf1c2b55e | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/03/2024, 11:41

Sharing

Report Analysis Logs

General

Target

cb51da2925e3156ef77fd9e773cf70c8.pdf
Size

41KB
MD5

cb51da2925e3156ef77fd9e773cf70c8
SHA1

6a4e6711b1307ea4ac736eae22964cacff3867d6
SHA256

38c01d54b404940afca9bb8922fce0699d6e7ddd7adbc4864798bb7bf1c2b55e
SHA512

e08d5feb0b35d8a7c6ee41a31624ad2dd71dfcd594fd4f02d33b332fa741dfb7da544c623a5c164146f9d63f14a2c174ca61ce8eeff871bca27e63d6319e326f
SSDEEP

768:HcC7FxuIfGYJhzsrgpquORVdHkvl/8oEc85uT5HLyiunT:HrUIJCXCvlE4N5HanT

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1048	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1048	AcroRd32.exe
1048	AcroRd32.exe
1048	AcroRd32.exe
1048	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cb51da2925e3156ef77fd9e773cf70c8.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a63394362d2b7234b94c15ff2951f273

SHA1
3208ff52463b15784a67d18a6ac0ef0f09a90dc9

SHA256
ebb235cc9cab8a6ef95a4ecde18b2a858fc31fc12b6016df170ddd82c2511d14

SHA512
f422ddf4e6c1949b75b720dd35b8a768ba24a9978a436e6999702244c03ebaa5d128ee789db138cf16d4059301ae12d31286982786c1daf65951eb1aec16f5f5

Download Submit