7f1a8cf138025b283e58ee6d3069bcc929a945022e3951a94032218523ea062b | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
31-05-2024 14:07

Sharing

Report Analysis Logs

General

Target

Gruppeneinteilung SJ 2024-25.pdf
Size

29KB
MD5

0300657a7988144e01e15a6af5bd958e
SHA1

a7f11ba4d583b404e07fd95f56a7439e5f7e0b80
SHA256

7f1a8cf138025b283e58ee6d3069bcc929a945022e3951a94032218523ea062b
SHA512

593db1ba65bf06cd41b7938394bcbdf6dd3b1e3651ef6c366ec68dd479a9fb57bd20e005476687ae5c3cf80cdd0d12fe13080735c140694b3425e98485f10f9e
SSDEEP

768:MlI4gFAWj/UJ/JgcBepqkMiZo550oV0DhOWKFH:Aiqkto0oeK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1192	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1192	AcroRd32.exe
1192	AcroRd32.exe
1192	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Gruppeneinteilung SJ 2024-25.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
20155617e0136e0bfe8efa48185379c6

SHA1
fce2a9363decf3f2a97b011e5bdaceee61813eb4

SHA256
a826650c5e26d029faa9131d32061d8bd906e16ec9f9a225efd1a0529bbd0f52

SHA512
41208c7f9ff3bef90ac68380e19703b35a8a847aa057a575c434b26553fbbca772fab68f6b1b1010133f71361f7954a12764590cb355c327d6450f6a74741bf9

Download Submit