6cced8e5fe2bff697033b97c965fad92f5e618f36f8d8ea0eefac670493d3393 | Triage

Resubmissions

26-04-2024 15:16

240426-snjd8afb3z 3

26-04-2024 14:36

240426-ry3p6see2t 3

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26-04-2024 15:16

Sharing

Report Analysis Logs

General

Target

2289-2296-Online.pdf
Size

118KB
MD5

70e903318c735bf899779ee190537918
SHA1

138543bfc2d27d7ccd3e9fdbd2610fc253d11479
SHA256

6cced8e5fe2bff697033b97c965fad92f5e618f36f8d8ea0eefac670493d3393
SHA512

1bff1ea524f25876ace45c47706259b966be26edc44925ee4fc180283fc2fef08a1bfd9dcf3ac1c009b15f24995abbd0402a1aa18da8e66d7529973bc4fbf8ac
SSDEEP

3072:mPHwTaqsBvOKIalpwvP9Pez7bOAyhHlZxM/zlSCHf4:mmaKxal6vFPeiAyNlPM/zU2f4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2992 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2992 AcroRd32.exe
2992 AcroRd32.exe
2992 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2289-2296-Online.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2992

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
9231ae49de5daca3da5f9e0530c1ff89

SHA1
37901d07302b90b7a70b41e178c566bd04568ab2

SHA256
af898b141a532c0a63c3b09751013ae6bb1b0354e4cfd8014e082575eb68548d

SHA512
9adebe3dfd6306abbee9ceaf40bf0fc3d9703f6437941e3e64e9b8c0debc595d1630fcc93312dc0043ab7aa5be822b87c662644ee12c31231fb775b218f5cb70

Download Submit