b85ac65633948e1b437084e9e2040dd0f10a8b26c2e35cc7a4eda269186c18bb | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/03/2024, 12:10

Sharing

Report Analysis Logs

General

Target

cb5fde479ce52731b3786d8ef9ab1964.pdf
Size

33KB
MD5

cb5fde479ce52731b3786d8ef9ab1964
SHA1

58392224c0f47f8a56f31204a5f3c88daa98307b
SHA256

b85ac65633948e1b437084e9e2040dd0f10a8b26c2e35cc7a4eda269186c18bb
SHA512

528699a98ea5262c01dea5616cbaabe01c352a9349aef9b8a43edf27e5c4d7a1bab0f641551f1c40513578bc00739e702d4cbe76facda22a94a102f825129218
SSDEEP

768:fZBqqbg8Mfuof9UjtPh6jHa4zpgFZ+PdtaZp8C5v:fZsqbaff9UJApgH+PKZSgv

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2208	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2208	AcroRd32.exe
2208	AcroRd32.exe
2208	AcroRd32.exe
2208	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cb5fde479ce52731b3786d8ef9ab1964.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
afa506ee859acdbf7bc12985494f94b4

SHA1
bef92aed445fd27353e5b6d949aecb6092ede14d

SHA256
ef300aa0103e59f2a3f13a7da1e8901965136d1d0a8dcf3dee2918611b979ac5

SHA512
2268f6b0efe2f8e8f431bf7c2644ffbfb58f5673b93defd23aa7af1c18a26ed1ee5069313da5a5911a0ee1a6f1e317e560c4ff7f533c49da8b40217fcb634a97

Download Submit