a681247f97012f94a32e9b78f799802ace3cb3c4706c4cca1f52afee037f7710 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24-05-2024 08:40

Sharing

Report Analysis Logs

General

Target

1099Misc.pdf
Size

220.0MB
MD5

65062141a5aa00068b12b74a85d67b41
SHA1

5ba2d2c53978b4de3a123d79fa3ed60e93d86a48
SHA256

133be53c484a7d2f18f7919a393b60f4276f7900417bcd7bfecdbe977e750fb4
SHA512

d9bdde0c7293acbdf4410b454cfd9a1ed6d645b69a108d88292cc3008d42909934d269d03c94d06e4868b1b2d0c6b0a260a3dfaacca9338e227452c307998231
SSDEEP

3145728:96lH+byk0ZggBznCh2HCea5bQ92NmDVr9XqnZGWp:

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2324 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2324 AcroRd32.exe
2324 AcroRd32.exe
2324 AcroRd32.exe
2324 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1099Misc.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
957cceabc97afa6412cdcdfe1172b776

SHA1
e8311cdd66a102e87f574e4cf5033aa6dad250b4

SHA256
0e4b2738e2c31298eec07ce3dbd1bb93dbb65fd340080a08650c998e60385c47

SHA512
d2a53c3b02dab791da10d0ae812b05a53d0abd23aa20fccfbd69ec9edb8411fbed59de40b864f43951f9ef27e735cc9a485dde0e08f5e30d96ba464af8e3cd09

Download Submit