d3dae03f33646171dd03bc94acc343342f7208312c8af063bc096cc2814630e6 | Triage

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
22-04-2024 23:25

Sharing

Report Analysis Logs

General

Target

US8000038278 - GOP - 4.22.2024.pdf
Size

126KB
MD5

aedb0244cb5682d96211da2d501f2ddf
SHA1

d06075e00987c52d640a46a4b51cd2d10c2ad837
SHA256

d3dae03f33646171dd03bc94acc343342f7208312c8af063bc096cc2814630e6
SHA512

08dfaf709f8ac6c6eb138ad5e12a03018c835962d539d86c7b3afe0e3d901716d1d81ac4547d562a1d325a253705544fc1645fe9a60aa3aac4e54454dd1ba88b
SSDEEP

3072:GIqrA209KlmRfREQ396i6zuOt9TZa6uJ0DKmnQOg:GIqk98mTEQkucQ6tGmnQB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

360 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

360 AcroRd32.exe
360 AcroRd32.exe
360 AcroRd32.exe
360 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\US8000038278 - GOP - 4.22.2024.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:360

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
fc22e7b8c4e83d60a29c1871b15ce615

SHA1
a475a8aeda83e78d33cc5dc541467295a0978a86

SHA256
e853980029a40fdd9210d9777d8915622579c9cb532eeb91ec45e080c08f0ff3

SHA512
fabf1324be48b212e6cefc627829145f8a6ea889c481f91845311a8de5a216ae701e35170b2a3ded18873e1b1bf9272763ab9d6face330a4b6b40f076e09fea3

Download Submit