c5942be2786af210b0342469b069ead2ca5912bcad98e6607bd87e2792b12165 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15-03-2024 19:15

Sharing

Report Analysis Logs

General

Target

cc3538d09ea804b93c23fb46fa81d0a7.pdf
Size

99KB
MD5

cc3538d09ea804b93c23fb46fa81d0a7
SHA1

04f8e583a4fbf3b555399c66c388be8329931313
SHA256

c5942be2786af210b0342469b069ead2ca5912bcad98e6607bd87e2792b12165
SHA512

f2362de11a6af5715f50a3714facc82559758805d0a84fc24104be1f706be1710b289b6acddb725647667935c32298eca64325116a0ec618482a4128cd1f4d39
SSDEEP

3072:cfRXmzlfMxKphplLeGC+ViNmJZY5dZEbNUi:URXIlEapMGemiLi

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2868	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2868	AcroRd32.exe
2868	AcroRd32.exe
2868	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc3538d09ea804b93c23fb46fa81d0a7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
18695cc88ab839161fd017bce1d31b48

SHA1
8ca609a7d92363128992c3a0c47196f16132caf5

SHA256
438b13689efe108a627f31b513cb3538f9f277d3b99e2a097ff82057f7512453

SHA512
615aab9bd1564612757eebbed5ab604a2f3c77dd74a976cde8a5c8df3d9a2dfcc99b597c923ef364422a5e12e966907e5b0002895f248954803309e4212c133b

Download Submit