6abe0fd040f29884dbd5c56d391b1364b7aa2171797ee8b681bc1aa729a0b7f3 | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/03/2024, 16:33

Sharing

Report Analysis Logs

General

Target

cbe49a253ffe98f34c2b5ff47ec06b40.pdf
Size

105KB
MD5

cbe49a253ffe98f34c2b5ff47ec06b40
SHA1

2d96c2650ebc5f50879774ab640e0bbff0ca0cb1
SHA256

6abe0fd040f29884dbd5c56d391b1364b7aa2171797ee8b681bc1aa729a0b7f3
SHA512

90a7fcc10c2aea4841519c2718fcf824861297b810385249abe49d5f2e1d30d011f67982128ee639c91c957ba14893f4273c4a6e8de08d5e13c6c81f0a8ea906
SSDEEP

3072:SW0IDnAx2nJeTT5kMzpHNXdQHRmuyaEkN1b:SWWwnW2UZdQLl11b

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1756	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1756	AcroRd32.exe
1756	AcroRd32.exe
1756	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cbe49a253ffe98f34c2b5ff47ec06b40.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
98de42bbe6e23b2890c822955fe5d301

SHA1
b2f94efb0bf5918efb680054ee6764d31ee0708d

SHA256
3d7d20202ac8f0239b133520417ae2106f74cee24bd0f9941393cad6eb924121

SHA512
fc968e1c44a6436020188fa277af2aeb178453815a45ddb6d023b98a392d1c6a2f6c27979a268444d32b9a429bcc5cf87c7b499d25bdb7d90874d8012e91f79e

Download Submit