6abaeffb7e462e7685c4a5a8d9e72761d25e06d7a97c92d0c64cad0a99f4f734 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
18-05-2024 18:45

Sharing

Report Analysis Logs

General

Target

payload_with_openaction.pdf
Size

2KB
MD5

355e0ce5be25ad5c8cd48801a6a59415
SHA1

ed5341ef186ca555306317ccf5c6bb48078e1c09
SHA256

6abaeffb7e462e7685c4a5a8d9e72761d25e06d7a97c92d0c64cad0a99f4f734
SHA512

1e02dd9c72a282153536065ca98adc9b13a92977f44cce11c9a93d16cc54483e51d48da16b4f15141cce53587b94f344fae35307fdea7d3313b8ceb1740f1c0f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2108 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2108 AcroRd32.exe
2108 AcroRd32.exe
2108 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\payload_with_openaction.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2108

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
3d7792ed7ff20311ccc675de80500d92

SHA1
68d30c744f6f5cfeff763ba788f0d80d54f0fe06

SHA256
8cccf7f1f896bf2ba4bd467bf23a84000bfd67fa01fd25f7962f161ff8fca907

SHA512
5a5a801596fdce48f1e90a6648c1f9f494329c69017de71af8f99e8360e547bcabf1a8a964e33659e1bc8e94654449e90c6e989b779fc54bde6ddcc465ba0fff

Download Submit