2de0849e81686ef91ab4dfca1c589247c7d8edb937051b2dd3d4b9f16c8cb3fc | Triage

Analysis

max time kernel
122s
max time network
129s
platform
windows7_x64
resource
win7-20240221-de
resource tags

arch:x64arch:x86image:win7-20240221-delocale:de-deos:windows7-x64systemwindows
submitted
15-04-2024 06:33

Sharing

Report Analysis Logs

General

Target

EUPL-EN.pdf
Size

33KB
MD5

254b5ddbc15269e72ba3a0508681a70c
SHA1

2263ae4c0b71bf7be09707d8ffe1176807e8c69e
SHA256

cd5d9e2a925d8daa92d083fd8c1cea48df1bcfffd857f4f93e2148fddc5001ec
SHA512

9bb5a4bf1b5167725e2126ce5152e3be11b7288c743c0d7c71b98d0551e47bce417b0b1c0a14ff523a7c90ec9d0b930a0879b31b22f10b0a068f635103faf504
SSDEEP

768:XWSMyoY3GnGTmerMqJoOunEg5ADW7+1DTsPVMAgjTLRzp/rFQ248gYT23:/93GXovsE+Anm+hJrZL23

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2220 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2220 AcroRd32.exe
2220 AcroRd32.exe
2220 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\EUPL-EN.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
71326762d33a241d69b3e9956bf94a3b

SHA1
7297c13daae0098886e30fafaddd93ad270ecc69

SHA256
41d3dd951d041b874545124cda2902a26fe14713012eceda3464024cca743a0d

SHA512
feb37786b8b10b8791ac3767bc33b9bbcdb7292609281197c8126b0ee35170a766527e132f8c18be2c0c04d2a52bd01234e09432a4a3211fd6b3f1455717f5d2

Download Submit