f48c4e8d59dfd8423f9415e043807e2fdf90f8f6404064820e74965f850d7461 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26-03-2024 09:25

Sharing

Report Analysis Logs

General

Target

ded3c0cc9ca9e0211aebad6a2766121b.pdf
Size

103KB
MD5

ded3c0cc9ca9e0211aebad6a2766121b
SHA1

6b49335162dd98e49f95c57349b6c4fb5f84b0bf
SHA256

f48c4e8d59dfd8423f9415e043807e2fdf90f8f6404064820e74965f850d7461
SHA512

e9aeaecc04be16227009fa0729404cfded1cfff15d8435648310cb4047b68626c33748fc401acd1e94a8ab133f55444cbde0a876312b8e29f70cce83607ddad8
SSDEEP

3072:N68+gUvQK1fJZPYNUU6UCjsJAlBaZ3in9ZEx7OAw9:ghvF1LAUsmsJ4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1540	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1540	AcroRd32.exe
1540	AcroRd32.exe
1540	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ded3c0cc9ca9e0211aebad6a2766121b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
90d8da5c7790cbfe287f26bc30a72211

SHA1
856dc0f9942ca46eaeab10f2d83091ffb2109e86

SHA256
fff1995b248da899bce040791819147d5f06019fcf8d71270cab6871fc619df8

SHA512
3a1482d5b705a17185466edfca27e2e166c8eed16ef504215b43fd7a8a8c77cc99de85425f1a55ae15055df45d51925e980bed6fc872d2c5dd638251c6067c44

Download Submit