2db7fd71116a13fd898a00afc7f4d8b4f825a36e124bb889d277b76a1f0dab4a | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
18-03-2024 23:32

Sharing

Report Analysis Logs

General

Target

d4a46dc2ec51be5a2e8c99ba14ff9296.pdf
Size

36KB
MD5

d4a46dc2ec51be5a2e8c99ba14ff9296
SHA1

a3af12d5e63d2c7dacb83514b1c3fd3ab006b9f0
SHA256

2db7fd71116a13fd898a00afc7f4d8b4f825a36e124bb889d277b76a1f0dab4a
SHA512

65024f3c19027602b9e37d6878c2273874c0b56e3f0376fe882302d727d711d2e0e68bea0c49436d48cb47122c2c41a27bfedc9936e50b3648dfa712b162e48c
SSDEEP

768:1J+N+xUS8dYTOYnNmh1mDosJVP25DdZu9JmWqid:uNGEYrGcosJJ6PuXmWqid

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1660	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1660	AcroRd32.exe
1660	AcroRd32.exe
1660	AcroRd32.exe
1660	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d4a46dc2ec51be5a2e8c99ba14ff9296.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
76c15a87d0edab8c26a5f8c1af81a856

SHA1
748dee3f92e3c1950871a5c59f1a4f59c2f8308f

SHA256
99d66c4c0550d6ef1a844950bdd79db713bc1e52cecf79570de432d47d5dd52a

SHA512
6bd093c941521ec25796d6c12e0330c5794ef8682140afe02415d2684092254589d5e5bb4a372f3a7154452e96c999ddd88955c4220ef41c84445b716ab9236f

Download Submit