3f0e07fc6345cc179b7571de8b9fb2bfee2f9bef92a4ec224b4e034cd49e697f | Triage

Analysis

max time kernel
141s
max time network
146s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11-04-2024 02:36

Sharing

Report Analysis Logs

General

Target

InstallerAPI.pdf
Size

102.1MB
MD5

db0521bd7e4b9fc803f9a900212eea02
SHA1

6c86b49b4c1e3ebcecd5376166bfe3bda6a141fa
SHA256

e95ce4146e3ffe7d5fde36340c01889f7634d6f91b92fbae1606bef9cb4a7cfb
SHA512

22d219dac43bd3200e666ef7e554584b0fd43c57c0a6dd7888dc80f71a9b5e73ba48400607205a4f1680af0ccaa197fdb1add05fc7f698e9246fe00a6a49080f
SSDEEP

3145728:96lH+byk0ZggBznCh2HCea5bQ92NmDVr9XqnZGWpg:M

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2708 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2708 AcroRd32.exe
2708 AcroRd32.exe
2708 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\InstallerAPI.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2708

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
fc7c3f24da1fb7adf0cfeedad9e961ee

SHA1
46055e991d1f5d1e910b06a0fb2d2941c4fbb02e

SHA256
91dd6766fbe303405d5778a8c83b8be3e2e869a1a301a5f05938559c676ecabb

SHA512
67857701e0fdc33e9ead797743a8dc9bbe685c370bfae948f3b6948ff0a7e338b200fba18baa6b97bead19268275f2ec5ed9c0edec026f0b0c18032ceff040ef

Download Submit