df9f2f04534fcdb1737422c908cb9613bac293fede18088bf09b5e66c917d20d | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 09:51

Sharing

Report Analysis Logs

General

Target

北王图纸/4-3、1-2-3型涵管 Model (1).pdf
Size

236KB
MD5

7f99bb1139b27116c39b6f607f604378
SHA1

b971f3e2ea21b8f433a05dfa2d96b50d7d565397
SHA256

62402229e5bcaf52268228627b17daf07cb84004acebab3a77615e90648f6b42
SHA512

e16a8090425a7704262b2f9ca7a0c98b74a725e9a2df07651539d539cc377ba1d466ffe8da8ab8319be60252465b1a50bea4b3e665f707e2c13233952db2e1c3
SSDEEP

6144:+QVdUXTR3Rm5/mEPXSdTUf2628V6xGwpK547j:+QVdotRm0E/dfV2G6xG8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2924	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2924	AcroRd32.exe
2924	AcroRd32.exe
2924	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\北王图纸\4-3、1-2-3型涵管 Model (1).pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
93a3a8e5a1c1bbf4e7d5f420b7f23ea1

SHA1
a6765f5edd7416354a3c12d9322469f5b4ff9a6c

SHA256
ca8e0a158bc4f3869bfa5d0aa0c8cbc1161912f319338a82fbfa190569c755c2

SHA512
7caf3a50ceeacb7a574e901481a955bd84bbd28d99800cf9d186cff0386c4dc70af0c39f9afb044c9955cf4aae104e1be0fd451948b144a475bd7a8da1bd3ee6

Download Submit