df9f2f04534fcdb1737422c908cb9613bac293fede18088bf09b5e66c917d20d | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 09:51

Sharing

Report Analysis Logs

General

Target

北王图纸/0土方-东坑 Model (2).pdf
Size

56KB
MD5

9257b9b6761e7c268dbd3b35f53117d8
SHA1

30d1b41f8c027988769048599c08772ca7e0d7cc
SHA256

46a9f3d265fe6c76608f58ec6ea6e0cffdd9d9e37d1d539a247174b4cd9ab83a
SHA512

69a83b3f33bf2c82a15ac42feed1d84627ab880d6ed011f35c7ae1379abfebefe11eb256c2ee26b29cee4b2caffc280977e6e0b2931a1226e23522f0f9ae1dda
SSDEEP

1536:6Qk08u5JV5r+Q8LvOPXEs4JjXjiDc8iE9o+cr:wR8Jeg0s4VjiDRiEa

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2488	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2488	AcroRd32.exe
2488	AcroRd32.exe
2488	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\北王图纸\0土方-东坑 Model (2).pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
91feeb6c6ed8d1a6ae9c67359613249f

SHA1
dd3a29f17711322fa030a0a7f5b93c09aaa0c40e

SHA256
205857a1e139295c409081766d0c0749a890f932fcadd5b4d4ff7a3941082411

SHA512
d789d60f01c4651a6f08f28f712f34f6750acc0ffbf055624597ae945a27e999953d47462b1c21cd5aa220e029f7218e6dee79c79d07764d2f6fd2491f76c80e

Download Submit