3f0e07fc6345cc179b7571de8b9fb2bfee2f9bef92a4ec224b4e034cd49e697f | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
12-04-2024 01:13

Sharing

Report Analysis Logs

General

Target

InstallerAPI.pdf
Size

102.1MB
MD5

db0521bd7e4b9fc803f9a900212eea02
SHA1

6c86b49b4c1e3ebcecd5376166bfe3bda6a141fa
SHA256

e95ce4146e3ffe7d5fde36340c01889f7634d6f91b92fbae1606bef9cb4a7cfb
SHA512

22d219dac43bd3200e666ef7e554584b0fd43c57c0a6dd7888dc80f71a9b5e73ba48400607205a4f1680af0ccaa197fdb1add05fc7f698e9246fe00a6a49080f
SSDEEP

3145728:96lH+byk0ZggBznCh2HCea5bQ92NmDVr9XqnZGWpg:M

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2768 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2768 AcroRd32.exe
2768 AcroRd32.exe
2768 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\InstallerAPI.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2768

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
7c733b3774bba76be6e663acd6e84fe3

SHA1
f95030753af4be021d02739f99357f9c3d902210

SHA256
1f6a89dda093a30886a531b79c60fa417ff1cda3143d9b4c621c3d4a3ac83e7b

SHA512
37c5d6970ff96b86614517cd4eee98bd88764973bdff8d8fcbaa3fbbb92b187983912d176c41862050d64ab75420efd95feec3918c6a745193d6aaecf6565b9e

Download Submit