f71ae9a69b1aa84445ce6b77d980e60cc088969f361c58505b8e322171b0fc39 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19/03/2024, 19:25

Sharing

Report Analysis Logs

General

Target

d6ed8c9a1532146953e6a50cdb1fe2d4.pdf
Size

54KB
MD5

d6ed8c9a1532146953e6a50cdb1fe2d4
SHA1

312854a1bb95b843ab1434f3853150cebff16ba4
SHA256

f71ae9a69b1aa84445ce6b77d980e60cc088969f361c58505b8e322171b0fc39
SHA512

97e887e854074180f8b6099c169392ed6d47276ed61b199f586adb24c57b31400ae7c20867f28599a35a7e160c9d0d4089ab4d8dd107ece1ce8d1b4638501b70
SSDEEP

1536:j6RoovHFX/w/yF0HGjzYRKm3XO88IPoc+ouP:GyovlXY/Q3jaxXO88IABoa

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2840	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2840	AcroRd32.exe
2840	AcroRd32.exe
2840	AcroRd32.exe
2840	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d6ed8c9a1532146953e6a50cdb1fe2d4.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c07883eb123d2858b3602324d94c1da3

SHA1
ce339212de147bbc645b612acea9cb9fe8e1ed94

SHA256
604ef04a949cf8de3ff52bcc523957e6dd92b5c12f529fe6591dc051868d6ab7

SHA512
0ca787a80270bc3bc1c185567098c4feca44ce56d2b1c820f35bc0a02adb7f226f4cbe207d00bed1949df2762b15e0b423291c48821029008ab68e79da28c3af

Download Submit