07872cdaf70ec4c6c703c18e3e7bef39b47a80d6ea9fbcf351e18efdf8d2f8a1 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12/05/2024, 15:34

Sharing

Report Analysis Logs

General

Target

67578a8009ee08ba4d08963e030678bb.pdf
Size

140KB
MD5

67578a8009ee08ba4d08963e030678bb
SHA1

09c8422341c1e05334fc41375c18f0faff61789c
SHA256

07872cdaf70ec4c6c703c18e3e7bef39b47a80d6ea9fbcf351e18efdf8d2f8a1
SHA512

55c5c26f9c38e8dff1977825ef2878bd43f68fa0e5f07f81f1f3ce01cd7640391eec8efa6873433bb801d031ee37d2bae1e7c9c03098eb64df4e741a27eca17d
SSDEEP

3072:dytIOt7aKRXAZ4Xk7J1h7fjDb2vX42uc3zxBsmD:Pe7ajJ1h7LDavXTu2xus

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2316	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2316	AcroRd32.exe
2316	AcroRd32.exe
2316	AcroRd32.exe
2316	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67578a8009ee08ba4d08963e030678bb.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
90ad96f47afbb451272a22cafb77f24f

SHA1
0e72b10df1af33bf2c4791caf0da63b640c28100

SHA256
caf5bf713349ea22af927d313247a2a6fa2f349816ac49301b60607dffc67a78

SHA512
c9da846073f3eeae41da8ef4e4ec58854c9054c4a691bc17840f5234010efe41e5c2f10bdccb75328ec7ebffc89587cbda15b3f3e30e939456480d8d19dfa4bd

Download Submit