3da2d7d56410550d14865be205df49636d03cbf992098f3ae9c6162967c1c641 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/03/2024, 09:07

Sharing

Report Analysis Logs

General

Target

cda95cb356936388b1a2a39744db5d0c.pdf
Size

62KB
MD5

cda95cb356936388b1a2a39744db5d0c
SHA1

03066df4025bdede9a9b858b83d822d5c91e115d
SHA256

3da2d7d56410550d14865be205df49636d03cbf992098f3ae9c6162967c1c641
SHA512

c9a09960127b5fb03f4361a6c1a318f8069e9f4de50b5e92e6c1bce1abb793a8db91865ae1a3770565a721559ef384b07feba11d2c59561e3434c7778895b697
SSDEEP

1536:yjvMtRpN7j36Ff/aSjmv5daEmqH1y+pGjLUIh+G5:SvIpN33IrCnaEvHI+gHDh1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1976	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1976	AcroRd32.exe
1976	AcroRd32.exe
1976	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cda95cb356936388b1a2a39744db5d0c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a5ac5d62f9c80aad42aff1b95a559517

SHA1
39d0d77b70c80444c131f000c352673f5cff4feb

SHA256
a81ef026740a27cbd929b63cf1ef8f9ac59686414919d59897dd838d7817af08

SHA512
bd6f24ffc5e5cf36a361d21abbd23b391b4d522704f14bfc278392dc3900382c564373843fa8f3a2e4485a653bf1b49871de0fa440e0c26c4eedbab61d92f787

Download Submit