cb33e5abaf22f4502ccacab30e1d1ebb64e7fe9eecd90a30f9e8a9f1349ff03b | Triage

Resubmissions

29-05-2024 08:40

240529-kkyezahf48 6

29-05-2024 08:24

240529-kav7vsge21 6

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
29-05-2024 08:24

Sharing

Report Analysis Logs

General

Target

bce1d387bdfdf7929d4ad8387875c5c6.pdf
Size

122KB
MD5

40725dc5679158cc047d01652db9f271
SHA1

70dfb997781cb4eb0f417a6366a1f02c7f5fb51e
SHA256

cb33e5abaf22f4502ccacab30e1d1ebb64e7fe9eecd90a30f9e8a9f1349ff03b
SHA512

e77dfe2161b621dcf3967ed36a67a104021ba645e282baf8ccc7ecf96e7916982491d7b780e04906cb9b91c07cee269de3a6a81a5186d69d77cca91177d0c49b
SSDEEP

3072:eWHckG7odzanL9Tc+iVFS8qApPlElB1GU1lVId6:eWeaML9GVF5qAoVleE

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1728	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1728	AcroRd32.exe
1728	AcroRd32.exe
1728	AcroRd32.exe
1728	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bce1d387bdfdf7929d4ad8387875c5c6.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a5d85f7dbbebba62fa76e2ca3835c1de

SHA1
c5924057ba3defbf33e10262370c13c2c8ede3e7

SHA256
772c3445e5e9a99a2805382c6de8ef63b5c428fb3dcf3293085b2e1a9bc4dcb2

SHA512
316743ed7d66f477477c3bfe1be7756865c29e8a308c5c649497931fe9f693655315e8222cb4a6d537d73b2548e9d353248d23eab80acc238a82b18713086afa

Download Submit