9324f094c2978f53027711999fd0dda723f8349d3d46d84c8caacf25556f12ae | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19-03-2024 23:23

Sharing

Report Analysis Logs

General

Target

d75649a48d58cae641fca312bc7fa4cc.pdf
Size

103KB
MD5

d75649a48d58cae641fca312bc7fa4cc
SHA1

27a36252ff0e60c6c0c3503becc6b1b335e944f6
SHA256

9324f094c2978f53027711999fd0dda723f8349d3d46d84c8caacf25556f12ae
SHA512

0c755c091b05600144ad05f768b09b767ae8a1f7119bab7632db0515d8d88ef3379c25bd7c6b192ed346ef6be30b6d0cfa733ff9223edc2859d9899da0300514
SSDEEP

3072:OCzLaanKPhCbrt5WWfCzUXccj8ZUGp+Du:93q5ct5WWfaUXpyQC

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1368	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1368	AcroRd32.exe
1368	AcroRd32.exe
1368	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d75649a48d58cae641fca312bc7fa4cc.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
064b4870264ec051947ae0a2589c94c6

SHA1
d376e938b968a913c6a11556eb125f2e523f4b14

SHA256
105c3191d0af1ce6c4bf0a13ccdcf535cdc8b78d412a713ffd9efb670ed7e63c

SHA512
929c47213ccae5a2f173cea21fe94ecb1383c635f22a477b76baa1cd8b526e63c60a062d521506ec1f8ded3bd814104a7a7fcfb5ada4b6c95a60cd30cb3aa23e

Download Submit