56df818e3aa57919be9874284a46f64250b0131837c9302c0988938e92109a10 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/03/2024, 21:11

Sharing

Report Analysis Logs

General

Target

C000567858802230.pdf
Size

53KB
MD5

90fbc13ae668f93b456326e7de70770f
SHA1

74b5d3f16d69396519d909fa79042fdf0f03b007
SHA256

56df818e3aa57919be9874284a46f64250b0131837c9302c0988938e92109a10
SHA512

0d40ae77556310f8f4b2143e36b46952c1e0da669e93e7bf074b41f2814c8bf144dcc27d2fc09fb5add60c4f143b0d93b8287a9977c9e36b90b90f6a13cb812f
SSDEEP

1536:Dt7vJehhQQBJehhQQ7jAq3ixqlo7giAKVkaJ0XwIrzv4GtWH:p1evQSevQTqyxqUhAKVP2wIrzwGtWH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2928	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2928	AcroRd32.exe
2928	AcroRd32.exe
2928	AcroRd32.exe
2928	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\C000567858802230.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6f384d1815802f8f95e09ef8bec30968

SHA1
7e5882d23bd9bb7ca4b2790a618e59044d2433b8

SHA256
04231b7b6d387872f84547e1d32cdceee915f9a78060f4c0e180bd56cfdc22ac

SHA512
6ed779975bca05fc4bdf0498ef454d66cc703bf31985dab527ed94496f7325d39c4da09535e3a3dbde65bd4455a826c74b88635f7d59f3c387ccbd9d17250b9b

Download Submit