df9f2f04534fcdb1737422c908cb9613bac293fede18088bf09b5e66c917d20d | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 09:51

Sharing

Report Analysis Logs

General

Target

北王图纸/3-1、板桥-8m Model (2).pdf
Size

267KB
MD5

16be39f50e23e4b8e7ac99146331c7d4
SHA1

f340e3f7b5aa872c10fc6bcdef55a491f226715f
SHA256

1aca38636f605ad8f6586b5164e844ece0e3c826fc930bbcfcad93ad77eb3760
SHA512

7f4911ac59ad66e917af539038ce47313b1a4a1535a12769be229fd9171676a5533d3b8396585a61dc3853647d32a0ee4a4882b573b9e31f1fd217484ec6af83
SSDEEP

6144:yriCGRdC9hl8X8OLYQHby3W8UtuJO/HlE1yBQ8zj02E:yOCGRIP0LhA0H2oBQ8U5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1676	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1676	AcroRd32.exe
1676	AcroRd32.exe
1676	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\北王图纸\3-1、板桥-8m Model (2).pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
423fbe144657e33157e64d07660c2fe0

SHA1
9e90fe04d8d721ac1fb933c1d57131d189885e80

SHA256
2520b471ca7813a82ae589cc4d62aac854a4ff1eb8cd6a624a65c5782ab8d92a

SHA512
344b5ff3931a60dfd48c4176fb202810f109b613ba1036b9f720c93b9a6f6b5b41033e33cf77dd81f5acb4e76594b56dbc6e311af9d50da10f5cf2efd31a151a

Download Submit