03943ea4cbe493de4ad33839057a2dcd794d96a5fa5a10509e1c780d3de0d5a6 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18-05-2024 18:16

Sharing

Report Analysis Logs

General

Target

payloaded.pdf
Size

1KB
MD5

df2f055dec164b94783ccde5cf52dc9c
SHA1

fc2f5bd42d7590792153f0eb8c3b403929365646
SHA256

03943ea4cbe493de4ad33839057a2dcd794d96a5fa5a10509e1c780d3de0d5a6
SHA512

314b9b602bc5d32620f7b44e5be9adbd98611094068d00678d95f58a3c70c12189fc17a4c5dae78a28cfb63085ee60ef778aa6291346d88b3d8a7b4eec75c0fc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2100 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2100 AcroRd32.exe
2100 AcroRd32.exe
2100 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\payloaded.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2100

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
1ad2c57f063dcec105ddccc66b3535f6

SHA1
8021051a771510ee7dc2ece75b81296ba806bd51

SHA256
17f485be674991e30540fe9d067c0aa7b88702de043eb29dbf3c8285e9749866

SHA512
bf0ac8d51e55e506c2931437162ac46482acad2de534120ad101fb1e6a609b33c6e914cc50fdaa7b8f94e8b30e1aea98129b06a00e6775cb178edaa8cabe6b79

Download Submit