c2ab6db7fa9f8e39773d8f30c9b6d49c4d44ca5bae64e834275105237bfa14b4 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/03/2024, 08:07

Sharing

Report Analysis Logs

General

Target

cd8af094e3282233f6d22e7da57f3d60.pdf
Size

96KB
MD5

cd8af094e3282233f6d22e7da57f3d60
SHA1

900fc0e78454519c9356271ac483fdc0608356b4
SHA256

c2ab6db7fa9f8e39773d8f30c9b6d49c4d44ca5bae64e834275105237bfa14b4
SHA512

28bb685b6ef850525721bcfbc7128d4198fb9f47c5832443311ccbc3b1f2dc974f0a9cf84f96ec84bfb2c62449a07e02884ba31993aab043fbe6cda9a8485147
SSDEEP

3072:PPb2KDaC6Y1+MML9PCgJ3ZC7g91JkK0QYYB3t:3bbD0YrMBPCgJ3ZKI1JmQ7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1740	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1740	AcroRd32.exe
1740	AcroRd32.exe
1740	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cd8af094e3282233f6d22e7da57f3d60.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7c124aa64ca70f7d8677822a695d8cdd

SHA1
648cc2d96b6458621163f262dedc2584a350e816

SHA256
02b30f767d5a64f2b415db96ecca65535ec0cc5139d36e6235d470b004295426

SHA512
d3cffc2e2617418c8d4ac4b4957113c2e5782ea09852fe0b62901df38e8676cba9c73854da9bf5e13fd0c4ddd429687b2e089df1a287a38cdb3d5c0369935dc7

Download Submit