922c56270f4a5d57e9f995ac038fce166b734c28f7fc489f997582a62d74f6b0 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25-03-2024 17:41

Sharing

Report Analysis Logs

General

Target

de95677c0c623709b81655f0e541b712.pdf
Size

34KB
MD5

de95677c0c623709b81655f0e541b712
SHA1

a9f8eb8916e14e4569ab9f84d672db9c1a7c66b7
SHA256

922c56270f4a5d57e9f995ac038fce166b734c28f7fc489f997582a62d74f6b0
SHA512

0b2fe8ca0dfe0ca0cde2fa75bec94a72456ddb8aec7ff6a8ec75bd19b013b9291a2e9ad566db17d2f2b8ae5b21fff14b9a8dfe77ae22168ac685f46d8b9fd4e8
SSDEEP

768:z+XYC+xsow5MP2rGlFgK+StkikrVhROUeTcYSd:pxNP2heAIUeTZSd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1540	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1540	AcroRd32.exe
1540	AcroRd32.exe
1540	AcroRd32.exe
1540	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\de95677c0c623709b81655f0e541b712.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f43a1e78679e85fd8711c338dadb81aa

SHA1
60fdd2c5eeca08cf4b09a0040f93f4471229330a

SHA256
0984eaeea01655d1c8629b5fe75465461b5b23abf4af9fbe898d38610a886dda

SHA512
b96de8cca98d2885915081b4d81aa5a65754102def0eb77bc0312199bb04a1850b4ecfc8f0ab1793d04a951f443d17c136578bea09450b6eafb7b9cc9f2cdb80

Download Submit