f95c09980a4564e48735d8f7ec9c9aee0f7e421a4ca4aa81cb6b0fbe475ac647 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20/03/2024, 00:40

Sharing

Report Analysis Logs

General

Target

d77ada0b8380ebc60cbbcb5a638e1aea.pdf
Size

96KB
MD5

d77ada0b8380ebc60cbbcb5a638e1aea
SHA1

35d2c498d91f281be9e91923df4b1c2f558309a8
SHA256

f95c09980a4564e48735d8f7ec9c9aee0f7e421a4ca4aa81cb6b0fbe475ac647
SHA512

05234518eb5e6d82f65bfeb52f8196a63ec0a4b82020b8fe5864959e4224ddc193a12a5f0850a002692a3817a44120eee99a74f8820e610aeeee6498326facbd
SSDEEP

3072:hjfvnevVC7mlhgda2GK6TlDUvB4Ic8ooDrwz:hjfvnaC7GKCl71ZoK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2188	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2188	AcroRd32.exe
2188	AcroRd32.exe
2188	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d77ada0b8380ebc60cbbcb5a638e1aea.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ee07095226c2e5607c1b19394933af6c

SHA1
73360205c3c93452e33a4127965ba40beb7b802f

SHA256
7d61188841e6e290174851e2aa26c402999a7fb49f3a54b1fbd0451c51032cc9

SHA512
b81ee48fd9771c2952b5642ec86c984b7239894a8f7da1cfc48fbf0a6ce540f5836b29e248081de23e9ae1fcf575bee151138d0761284f116db4a3facee94eaf

Download Submit