45a8436099e35fdeb74bb2d502eba9ed5b1304d9c2354e36d48ac55a3c0fc530 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27/03/2024, 01:01

Sharing

Report Analysis Logs

General

Target

e065a2035dae9eb630f156dcd15e0064.pdf
Size

97KB
MD5

e065a2035dae9eb630f156dcd15e0064
SHA1

a8a51c090fd7a2285a18ddf8bf41e564366eef5f
SHA256

45a8436099e35fdeb74bb2d502eba9ed5b1304d9c2354e36d48ac55a3c0fc530
SHA512

e405c4687fd0b973b57b6c2f70f2943d4ae0908cbc40b212d3a5e23c06c8c27bae35801a2cf0086974f485c0946b3608a32d155945493d57881492ad4053f551
SSDEEP

3072:wSmZ3s50MYfvkJzUmD3OnUVg2QYomp2DMqgPSyoCT3:wRZy4vWfD3Oqg2kE84P

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3008	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3008	AcroRd32.exe
3008	AcroRd32.exe
3008	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e065a2035dae9eb630f156dcd15e0064.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7f327585d5f45d295a84c4cfba9ef306

SHA1
1af9cae99ecde064337d183f2af471a90da927a5

SHA256
32580f45016e4d2392d7fa5756f010dc96344f11ce3c37139775625cd40ee93d

SHA512
20c37695ce01a6412ed373ec8acdd86dea218ff91bf33afa21247d954ea4178ab4f63e8d60b0c65756bf2cfa220b1d01e4273ea16732e20741486e67d9ef8e2e

Download Submit