657f1f50f68be4f61cf43276da7d314ddeaadeaeed6e0ca459a0143a41a024cc | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27-03-2024 14:12

Sharing

Report Analysis Logs

General

Target

e1dc06998629ff9877b299895cafc8da.pdf
Size

33KB
MD5

e1dc06998629ff9877b299895cafc8da
SHA1

cd85013f69461fd7d66005d5433fa4b8c71bef63
SHA256

657f1f50f68be4f61cf43276da7d314ddeaadeaeed6e0ca459a0143a41a024cc
SHA512

27390b2bd4a322eb77c7417b642b68e29806d7be341a1c2e1b9fe4a338dc458effe274b4b706d1c1b54a662c8c91345418f926beea693daa78223d48d5b5ddce
SSDEEP

768:tfLcL7QZXlq6vPYHLgD4lrG1IcnopEQkxb/5nDo54:+807rg6OIcn2lkpxo54

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1568	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1568	AcroRd32.exe
1568	AcroRd32.exe
1568	AcroRd32.exe
1568	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e1dc06998629ff9877b299895cafc8da.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b8242d641fb976bd2a0922eedc501639

SHA1
17ced5de854ce1d52cdf8c9dd1b442dab89f3e07

SHA256
bcded0fc6df62267b269abcf9c4600710df19b56712df41db4bc471d70d8dfe4

SHA512
a3af0fb9a1810b7a623007edd608c091b694e90e8055d758d10d77e8ae008afef0b33b5518838f5bc7990c0b07dd4667cb22d385005e7dc7a936505a064f64be

Download Submit