8ecfd5355a68d2941cf22f7d0f85559dd145ab3d64445fb17e2d444c8530f467 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 15:49

Sharing

Report Analysis Logs

General

Target

38 CR.pdf
Size

423KB
MD5

344a1e2bee5315092b008571e35c2ace
SHA1

1e90d07ee14b9a49660a1b4b0dc562cad544154f
SHA256

8ecfd5355a68d2941cf22f7d0f85559dd145ab3d64445fb17e2d444c8530f467
SHA512

351b6c01f82c4175317cff0817007570f87f5fdb2f826f6558a5776e12c468423adfc2e3ecef71ab09f9a981c4debb8522171db7585b5d06c3e380235b3f943f
SSDEEP

6144:InMLHOTfZNHoN7mX3X3bbmhxc9O8pRzaP+dadhMWTR6VblRVO3:IMLdNObma9LtaP8AnTRAb/V6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1148	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1148	AcroRd32.exe
1148	AcroRd32.exe
1148	AcroRd32.exe
1148	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\38 CR.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
70b04617d2da8429f5ab8766301656b7

SHA1
a46aa14de657f51f6f497f2b2b43ec93d68f0748

SHA256
abad7e4b0705936bd8b00b243e0581cb031c1594c19f0a0cfdfa013c47777d28

SHA512
9172f6e171308695409f878d81939911698cbd5e52280a2fac9222503b498d66eb71ac5ba7271e9ac95f54d4e584b7d2fbcc790a3fbe569352304e5620513b9b

Download Submit