6cced8e5fe2bff697033b97c965fad92f5e618f36f8d8ea0eefac670493d3393 | Triage

Resubmissions

26-04-2024 15:16

240426-snjd8afb3z 3

26-04-2024 14:36

240426-ry3p6see2t 3

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26-04-2024 14:36

Sharing

Report Analysis Logs

General

Target

2289-2296-Online.pdf
Size

118KB
MD5

70e903318c735bf899779ee190537918
SHA1

138543bfc2d27d7ccd3e9fdbd2610fc253d11479
SHA256

6cced8e5fe2bff697033b97c965fad92f5e618f36f8d8ea0eefac670493d3393
SHA512

1bff1ea524f25876ace45c47706259b966be26edc44925ee4fc180283fc2fef08a1bfd9dcf3ac1c009b15f24995abbd0402a1aa18da8e66d7529973bc4fbf8ac
SSDEEP

3072:mPHwTaqsBvOKIalpwvP9Pez7bOAyhHlZxM/zlSCHf4:mmaKxal6vFPeiAyNlPM/zU2f4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2012 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2012 AcroRd32.exe
2012 AcroRd32.exe
2012 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2289-2296-Online.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2012

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
7cbced6b402e6cdba84eb96e419ddfde

SHA1
5cb5e3ef01337da9aff6835060462b745b5bfb4d

SHA256
fb67218857fd549be5826f4f64e741471dbec174a3785f6300cb36bde39b3704

SHA512
f32a8fda059c0df83256cc615c5c09290edc83d39a403a5a3174a65e451e6ad22dbe6588d1f5ac16a93a011fc1e10ebd8ce5c5c7596fb076ae554f9ebc90a19c

Download Submit