6adc03b1d68f678f91d6dde97dbcfc110b1ff842730008afb1c4c83da0e8d7ab | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
10/04/2024, 11:43

Sharing

Report Analysis Logs

General

Target

6adc03b1d68f678f91d6dde97dbcfc110b1ff842730008afb1c4c83da0e8d7ab.pdf
Size

2KB
MD5

445c13a17d5a1854a9e1e4643520ec2c
SHA1

ec96215555c4282da0335279ca7b51594f7f0e19
SHA256

6adc03b1d68f678f91d6dde97dbcfc110b1ff842730008afb1c4c83da0e8d7ab
SHA512

1830fcf1def01994458dd031f838192fd13d8fab70d880b016267c70724d0bef1e15204e9df3aa9cb6dba023561bab8280b9ff2a7f18aa278e1ba2cce0941168

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1664	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1664	AcroRd32.exe
1664	AcroRd32.exe
1664	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6adc03b1d68f678f91d6dde97dbcfc110b1ff842730008afb1c4c83da0e8d7ab.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5435acad2e1d601ed0933cdbdbd39c57

SHA1
6545822aa19a541876ca5a666ad4788114b253c4

SHA256
733623bb53024ba32e846dcd5ae4a593cda879a02ebc156f8946ae709da02db2

SHA512
6fadd11746deb6d7ea5c9e29e23d4e75316acdfcd37d51eff548a1c09a6d398aec9cff9cb2bdf951d76ed92b3e79b056ad20686c2a0555133fa6eef536a72fb3

Download Submit