fba1776f6dc19149587ddc846ac295a17632efbf56b756aa43c07f308a68322b | Triage

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19-03-2024 08:02

Sharing

Report Analysis Logs

General

Target

d59add8bc05d11c94f776744f30ae1e9.pdf
Size

34KB
MD5

d59add8bc05d11c94f776744f30ae1e9
SHA1

aa1d7126c28c4520ee5c1e254db8a3fdc94e3ec2
SHA256

fba1776f6dc19149587ddc846ac295a17632efbf56b756aa43c07f308a68322b
SHA512

8865b9dca60652a8771b1efbb953262113bd38a7b2ba5f185e5aed90ad489a647d84394619b8eb4b6c3a03087bd6d3194aa991b1bd9140b09e0bf190ae320be3
SSDEEP

768:kYe06ikAUMUF0uxApjPtwUphGtqgXHAOJMx:kh3FxApjvCtqgXHAOmx

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1524	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1524	AcroRd32.exe
1524	AcroRd32.exe
1524	AcroRd32.exe
1524	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d59add8bc05d11c94f776744f30ae1e9.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5fd41a33fd5221269b6278ace86c2866

SHA1
08b858b2dc30a175f81f4ec0631d659e4e8edb9b

SHA256
6912aa6cb43cebb479d116c1600ae042e2bc29a66ce3294c4c8b9219edada252

SHA512
1f0d0bfd7e1e7cdce4cdbbafbd046c6dd50c092351aaae1554053a388d3b5376018fc8f24d5db94917f19f044c205ff08d2afcfcc8912e3f7fc0e2923a614b8b

Download Submit