8eecf3380294e6aa573faaf825118cfaa3d1daa79c3afc742a424f9f6cfd221d | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
22-04-2024 16:03

Sharing

Report Analysis Logs

General

Target

СОУТ (2).pdf
Size

440KB
MD5

059ea79018fde78fd6e83d7f6c50bf62
SHA1

4b39e13fa1b1ec1efd42370722cecfe7c73e8228
SHA256

8eecf3380294e6aa573faaf825118cfaa3d1daa79c3afc742a424f9f6cfd221d
SHA512

c4323f3cd4664a3385821854e76acc392052f99107a334bfec3eb4f0b2e7dd819de21a72cd97176996f87e6b6e2fa9eba150b5f99e351a51935610156dd1120e
SSDEEP

12288:U2BZ/zxOHGBCTcXZQmaXd/xfDgubbMSbSuyj+z:U2BRzsmBemaXd/xBwqSiz

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2420 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2420 AcroRd32.exe
2420 AcroRd32.exe
2420 AcroRd32.exe
2420 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\СОУТ (2).pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2420

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
16d9965b852c26afed1dbdc52cc5cd30

SHA1
73b4858c547a04a07b5d8d00d6e46009f20fed5b

SHA256
90416b13a8600ee33c6a8ea900e6816cc7d18975d695986d0018fdee653341ff

SHA512
c4f8f679ee695be7f316a559744aebe475b86c7babe3561d533579f56209bc0da1f1dfcf1f561055b87834abf4208f1fc0a1191916c61f84a02300befc16c682

Download Submit