965616976ed28bffd24f8316ba6bad5d6008dc511c757643f038bc6c57c37e2b | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18/04/2024, 21:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

problem.pdf
Size

6KB
MD5

992c39d1f34365f56d8893d6dc083a3b
SHA1

79a758dd8d1564ea275ae7fc0a7f776b2faa868d
SHA256

3be2e406ecb6df8e673ad9cdea5a2c88bd0563f4e091cce8252b6c713ed52987
SHA512

c9ab365079aa697b538b6f1655bac8b04de3bb029d2fe0f4da3acbaecc6aa159002b7f580b2ae79997cd58c4471744a096ab143de28fd83d185604d09b713ce6
SSDEEP

192:+TNfT8QlZvY6paNEusp2W0b28/PLHBqYFaaSHVVKvDG:+JfAQl+DsghLh1jS6G

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1996	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1996	AcroRd32.exe
1996	AcroRd32.exe
1996	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\problem.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4a80cae59fb7a0cbe3f8a0ff19debb47

SHA1
01ea25380746b3f5773f11b1f22d5711e47d533f

SHA256
babbfe51e5fa4685220366b75c29b9f110aded521f14f77fe788b0c5a571a308

SHA512
d13cc461717a36f700af0cac547d24d531bb1008e22e33b0f2cc68b4de9d96edb8287dbc1bbd60f466588f14daa9c882ab65134c6196976c4081f620da144e69

Download Submit