4c158d770c395b3c0c56c4a318604ee751c085403ce41d612f5a681527e5a850 | Triage

Analysis

max time kernel
118s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/03/2024, 19:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

cc41fb80a1755cbdabbf5d35220f43ca.pdf
Size

99KB
MD5

cc41fb80a1755cbdabbf5d35220f43ca
SHA1

309e7376741ca090bee0ccbe330b29bd632f3dee
SHA256

4c158d770c395b3c0c56c4a318604ee751c085403ce41d612f5a681527e5a850
SHA512

28a0634a07cfdfa882567837fd4b738c6148718c7f3e42d82cddd4d9b436dac0449069de1ef10975767f66c5d1a49204e2025559d2d81f35f30f5ff54cc9069a
SSDEEP

3072:9mVbOc1YPpc1R6MmKrmezHI92qdP9VI6QiU79:9AKmgpc2Dwzo1op

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2000	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2000	AcroRd32.exe
2000	AcroRd32.exe
2000	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc41fb80a1755cbdabbf5d35220f43ca.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
582119543070c20b742b0eefdb277441

SHA1
53c289eb90ec00f5fa5d16c8606381e4b69897ad

SHA256
cdc97349e08b3f3e69c05dce01b62606856eee348b6d3e1d8c44951729065d9d

SHA512
e840b6e61412dc683eefe44ebc3889620fc00068f873e0e697850c78b3e3e8aaaf5c0d5c41e5e17edfe210f0357f5c0cb700cc5bc5e7fdb79d448d9e9c6db1f9

Download Submit