df9f2f04534fcdb1737422c908cb9613bac293fede18088bf09b5e66c917d20d | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 09:51

Sharing

Report Analysis Logs

General

Target

北王图纸/0土方-东坑 Model (1).pdf
Size

56KB
MD5

21f248c7d07d99293a7bc3f2a24ca99f
SHA1

fcd9d3aec9a2781195f5297928b7c24e2036be8b
SHA256

82432709079b558db63784c59bba55c2d3a101cf028d1ab54dc47f80f3ce1ab0
SHA512

f67d5421c554b1ce6c0b2ecb9e986f4e6d2f42a9d99eec9898055fb4b5de753364923f03cf6e94c2dbec2815701ea47e1005b7305b7d824fa8dbc04b3a96e755
SSDEEP

1536:T25/j3PDH8nQJMNDKeQrG9j3plY14nEgqE8N9unS:T2Nj3PTluZKeQrG9jntP8NgS

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2732	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2732	AcroRd32.exe
2732	AcroRd32.exe
2732	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\北王图纸\0土方-东坑 Model (1).pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
3c502d13353fff4ec2f4073b74e50f28

SHA1
5e12b9ba3e65752f95fa204a812c0538e153c604

SHA256
c323909ab936f20b92dc7a1803acd81e85c02e32da183d8a85b461c1f4998db6

SHA512
b66a2acec10af79d53d9b3f727435ce7e90705eedd741de194114b0d5524aecf5246ca358cda8f2d85df99ecb02d41e541e9e68c572d170664f313daf7120774

Download Submit