6a4030a01c47e554326b510720c620d55de6f57441f6153e65c60962a59f02ea | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/03/2024, 13:10

Sharing

Report Analysis Logs

General

Target

ce241b893f3e82d9f657f091a7eac473.pdf
Size

34KB
MD5

ce241b893f3e82d9f657f091a7eac473
SHA1

ed912d18348c84646ba355af0283a27b5dd1c2b5
SHA256

6a4030a01c47e554326b510720c620d55de6f57441f6153e65c60962a59f02ea
SHA512

e40ebd7b72860b3ffaba27e9856c3827ccffdf67e4507b11b2ac002d8598174c7cefd12c0631e115b7e6920e4dd74b39c8e3c46dfe10a4e9f5d44a78c6fda3c9
SSDEEP

768:bb7WgrTmS8nq64QCKANOs84p9cs4qQ/u7u3cWu355P5aB:jIrNqQ/aAcWyxaB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1908	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1908	AcroRd32.exe
1908	AcroRd32.exe
1908	AcroRd32.exe
1908	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ce241b893f3e82d9f657f091a7eac473.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
dc1e702ab227070aaeef634a21ec6d2d

SHA1
64297b0eb98421b44ea9b2589e68acf8b11edaf7

SHA256
bafc7faa7e5833507e74073d2e94f36212f89a3ef900b27b1302555446c553a3

SHA512
87281599c39877bd9e3005054afbb651831f064355183a9657feb111697b17e1c2b04b90e94f32eec04e73ebcd2cfcf10e7491940edcf2dd34a0e6a7d9c46360

Download Submit