f6dc3ecb31b9e36c00558278d2967b885ad6889d3e2eb67df867032a3efd5158 | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27/03/2024, 03:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

e0ad2d7b836962a80613e6f49ef66ade.pdf
Size

34KB
MD5

e0ad2d7b836962a80613e6f49ef66ade
SHA1

69e66a60d6a8d56cda4eaa855a11ff95386c1560
SHA256

f6dc3ecb31b9e36c00558278d2967b885ad6889d3e2eb67df867032a3efd5158
SHA512

7b152c9755336c6f3d638fcb74a40ff5036864d6123ad14d5623fc84e226b3659d33f2553a6ee1b2ab1b23b3cfe008aa5596d754ff73f31d9b2386d227c00d0c
SSDEEP

768:WCpFfQHNqssQuuMbPPo2IaDuYwcXer2rVU7ngd:V5eQkjzcXfU7gd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
932	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
932	AcroRd32.exe
932	AcroRd32.exe
932	AcroRd32.exe
932	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e0ad2d7b836962a80613e6f49ef66ade.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5aff2efa93095df0c6b7fcb4663e242b

SHA1
72508e8bd70a20c499e5b9e76ac4ee4f7ab03bfd

SHA256
2e62d592c66a78806ce4c7db67a013d8216f2bf20757fc94ffff7c6fbd294b33

SHA512
7ad0ca344886825513e9071cb86cf77ae7a4db83e65489d8caaf06be24ebe22acbcb5022d4a3ba8420ffea9865e0d3a8f69fc84be46a48c0622a0e9f91e63c09

Download Submit