4bb3754c78485138870ed9645108bbea54dfde2670f7e873226a62d4b176d578 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19/03/2024, 10:38

Sharing

Report Analysis Logs

General

Target

d5e64db3e0ca15dcc69ea95c4206f5af.pdf
Size

35KB
MD5

d5e64db3e0ca15dcc69ea95c4206f5af
SHA1

d1bdacb47a2b4443b1372a488ee8195e1722144f
SHA256

4bb3754c78485138870ed9645108bbea54dfde2670f7e873226a62d4b176d578
SHA512

4f46dcf4bc3a1621ddf8b89df6b3fd5d35f489b33818a5ac00a1210fba3c3643ea2990516315aa4613cd804029294a8b910491a1be9785420aaa2b37ab869053
SSDEEP

768:1pB0tEkANZJc3srg6qxzRzcEw4jiLyZcMvDnnb:dsTAdckqxzdcj4jCNCDnb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2000	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2000	AcroRd32.exe
2000	AcroRd32.exe
2000	AcroRd32.exe
2000	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d5e64db3e0ca15dcc69ea95c4206f5af.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f46530fb8578c85fc2840f7b5996ddfb

SHA1
7f0f0128eff52ef31e546b9714516950a3e959d3

SHA256
924c63cd7b3c4e93ebc08ce6a1b25053e7bb3b90d5f4879e7bdb0b3e90147fd5

SHA512
3a42904ac33effc562f009e3574952a413565f99bd9beb0481e79869d00c825f40db0d9328d147de020ee91ad7491ce12e578d9c85cd48e1989561a7e633d71b

Download Submit