ba8de26a31f14df45b2b56dfb2ae7667f7a96ac9249a89d386357e07dae95a28 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25-03-2024 12:02

Sharing

Report Analysis Logs

General

Target

ddf6918f5933c1dd141e9103c3cab0fa.pdf
Size

35KB
MD5

ddf6918f5933c1dd141e9103c3cab0fa
SHA1

e022d09dfc2bc78a8bcf8eb93a3474f6d2ac229b
SHA256

ba8de26a31f14df45b2b56dfb2ae7667f7a96ac9249a89d386357e07dae95a28
SHA512

c51cfa9d5feca6aebdd0f97061871e10aaac3f510ccb42d841c790f7a54c2bd0fdf0717b768d984e096afa9d778771c3230bc59e367ed8d3d2aada8ac729987b
SSDEEP

768:DM9QE+ZFyvjGOPp0soB4ksEuaQllXPTQ5qPc:DOctOK9qksm5qPc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2244	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2244	AcroRd32.exe
2244	AcroRd32.exe
2244	AcroRd32.exe
2244	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ddf6918f5933c1dd141e9103c3cab0fa.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2034731deb1bfca21d1ceeb8c2e70eec

SHA1
29aeb352b5c6ea40e5fda2aee72e95f2c80294a7

SHA256
2338f8c5f2b8a465b60dd6d6d84b384e6b9286f97c1dfb3a6cfe8fb62656f66a

SHA512
060e76e60d630fda36e1e09335369b1af1d4164b00cac6337291e4555d7a4750743791488be7b85673e1aae4e24543228cff426178ad07ef5aac46a93e6fef25

Download Submit