df9f2f04534fcdb1737422c908cb9613bac293fede18088bf09b5e66c917d20d | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 09:51

Sharing

Report Analysis Logs

General

Target

北王图纸/3-1、板桥-8m Model (1).pdf
Size

447KB
MD5

f4fce3bffd7dbaac6ab265772f806133
SHA1

cba0622b49f73b43329d1887085ae8faeb0fe5c2
SHA256

1976d57ab824257f2845565ee119ce44717d9c74732dba46f9c8c5a3f3cf4d66
SHA512

bdaa61f964e0c8835d316c49260dd01ca70305ab96e43117b168cf73199b577529f52cc29994029e827f3448450bf21ffcb68290a3cfc29a57b25279eb21db64
SSDEEP

12288:F9b0+47uu4fdSbWGN7WmDq2Kx79N1zji+H:zY4u4lMfN7xDqvx79N1zjiO

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2184	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2184	AcroRd32.exe
2184	AcroRd32.exe
2184	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\北王图纸\3-1、板桥-8m Model (1).pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f990708e0d5632152c1463cf79b96bc9

SHA1
12ea166ec18acccaf87da884550381484f6dbe50

SHA256
4648cae28f62b61ed6c1f121d327001205aab3a88424070d34f6281064535962

SHA512
fc97b64f47eb8e52d5a704598c451d78e06ca4b7be0ce710646cbe8d63b9e3328b0ce9a6cb3e4f21820ff8c4e37d2e0d5ed2bd0f89b4e6fe1c512770aa98c462

Download Submit