8d4092fbe5f24a68603fdfebe55d29a53900841f0e58742b09d41f6d91c987f0 | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
25/03/2024, 14:18

Sharing

Report Analysis Logs

General

Target

de367e9837191613cc0681a41440fb64.pdf
Size

97KB
MD5

de367e9837191613cc0681a41440fb64
SHA1

72cb7742d220787bb73652d5b50b293e825b9533
SHA256

8d4092fbe5f24a68603fdfebe55d29a53900841f0e58742b09d41f6d91c987f0
SHA512

ee2810fe21f5e2a345727025a0ad03e37b40632d63404dd2fa0ea9c8751898dc7b5d75b2c948109c6b0524ebe1bd382b9c36087e9a4d81009aee7734e724b9b4
SSDEEP

3072:zAkIH7hZ4x/g8kHTERuj34P2HVWtnnh8ydD:UkyN7TER2cnl

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1724	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1724	AcroRd32.exe
1724	AcroRd32.exe
1724	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\de367e9837191613cc0681a41440fb64.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ba3458858c08cb41fc0aeb9de159e990

SHA1
958110cf8c2029aaed3fed4c4d8e2932717ed0e4

SHA256
f888ecaccdead926bdb8dae5c0ed8485272d0dcc4be4316addcb5cc5f9ae6b55

SHA512
16d80a931e1256b0c73e2248f5ae469d1002be49740c218b4496e1e0c30368e94631dbc61c576ea2fed18170799d8632cc8269bab37c1420523d3ed984ef8e7a

Download Submit