df9f2f04534fcdb1737422c908cb9613bac293fede18088bf09b5e66c917d20d | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07-05-2024 09:51

Sharing

Report Analysis Logs

General

Target

北王图纸/3-2、板桥-14m Model (2).pdf
Size

267KB
MD5

4e2e44e6441de0f7edb9d546045016fc
SHA1

b071555885901398abed0f0d7579bfcd1807a745
SHA256

9358afd924969be093cb2b134099960876c29c4589886977ba730fca3ac55f9c
SHA512

e11afa00873a137e47064c00fd01d9f1e5e66fa1ae9bddbf0515eeed4337f36ccc973a1322a76f1e3467248c6ab7582de7d27690450a87ad3ec841a9842546b9
SSDEEP

6144:DAPTrqYDpLuB7rYsDAIWBXs/TLopsLMfsQwaxpKr9jQ:sPDDpLuBPAQYOL5LRjQ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2256	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2256	AcroRd32.exe
2256	AcroRd32.exe
2256	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\北王图纸\3-2、板桥-14m Model (2).pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2256

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
8155afc82b280a50404b6dddbf8011fe

SHA1
dadd8733a886391986920ae8c6c46e9a5b13e34e

SHA256
247fff293851274871db913f947a8eea02f6c9bd5b8d8502d866af191290bf53

SHA512
e3c456adc87389373e10897026d73a677ef3037d450b7149f2848bc0c67e0cb74875811a60912fa0aa48a5db11c804bfc163b4a35fe096a58fe87689d2fe0927

Download Submit