dafd49cc8f608579859f791a1286781fc9d43ff3c9491c494d31a76d6ccf4543 | Triage

Analysis

max time kernel
1561s
max time network
1562s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
21-05-2024 14:20

Sharing

Report Analysis Logs

General

Target

special!!.pdf
Size

27KB
MD5

65dd099e28fe95176a5b6f24c96765f3
SHA1

97f6f21e6ed5f74c1b98bfd538089b547d62d528
SHA256

dafd49cc8f608579859f791a1286781fc9d43ff3c9491c494d31a76d6ccf4543
SHA512

79d178847d1b5eb26a4489a014cd021c9763311964d1b7ed4b9cd4eac74eb3ca174bb3ed8e794348395308a8305bea9812ca958818db6c84f23c434514779943
SSDEEP

768:kkl1WNNKQJrmTHZjku168ET9kF/lEN6RWMWtD/3CSBw44IkN8lwxX+I+oQ9VLZRJ:OrtYZXp+X97

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2208 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2208 AcroRd32.exe
2208 AcroRd32.exe
2208 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\special!!.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2edb9c723a818f87087c7b6bdad07256

SHA1
10a4c77dc4dab8fadda250e8d04d5ca0b42e82f5

SHA256
f33ef6eaa4245f0efa5c21802ecee57672a9d39701710faabec474985e197331

SHA512
da5ce8f681868e46d38ddf0750ceb7e37cc66b8c4d2ac8c5889a9f2bc117c4ab3c5004df10dfa6f3e1bb3f4ae1709501130e431df184e70d78bc320ac60a32e4

Download Submit