5a9a53b5cd9ee22387c4b4eeabca501b5d7b104810f2a60aa5d4bf9b98396bef | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16-04-2024 01:12

Sharing

Report Analysis Logs

General

Target

5a9a53b5cd9ee22387c4b4eeabca501b5d7b104810f2a60aa5d4bf9b98396bef.pdf
Size

880B
MD5

069d87a136ed4278cbc7db0642506d68
SHA1

17a876355fd6308f4877da2cf369ea6b9d3cde68
SHA256

5a9a53b5cd9ee22387c4b4eeabca501b5d7b104810f2a60aa5d4bf9b98396bef
SHA512

9f728f25a8205fcd757421765a9200da2a6cdb4162142c396654b33e61f6d0972809dae97a5feece29cb99ba3aa0132bbc4892e96602a4ba979049a420cb58ef

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1300	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1300	AcroRd32.exe
1300	AcroRd32.exe
1300	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5a9a53b5cd9ee22387c4b4eeabca501b5d7b104810f2a60aa5d4bf9b98396bef.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1fbbdfe795792ff3b6b5fc4780f8b02c

SHA1
7b31690945e39e241b97b01993a70c2fffb16b85

SHA256
56aadac7c16c1e49b6bc900d318832731fc1419766f093e32bee6f574d4539ed

SHA512
30f9f1a1244b4b67c341730354167c8ae9dfde58aef0c8cedbcca0a7039415f7786cfa8218aae2ac6136ae82b2331062c3f624719ae59f6d44629d006dd9664d

Download Submit