3ba40a25f1990652c3578199a88bbcc568234d38cf848b0a73fd84dbd2bead2d | Triage

Analysis

max time kernel
152s
max time network
119s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
03-06-2024 07:41

Sharing

Report Analysis Logs

General

Target

RANGE-02062024231833.pdf
Size

23KB
MD5

25cdeae2ce4e4b98f953961426b5eb5c
SHA1

1cca1007ae8a757a247d98ef5003e395e56cb1e3
SHA256

3ba40a25f1990652c3578199a88bbcc568234d38cf848b0a73fd84dbd2bead2d
SHA512

f875ed1b98ca2a7d873fc2c70ddaa93a22aa6fb02dff19001ea0a1cb75f2b025d7012a211ff584815f9e91a2c11fc584fb210800e7491c4750208577bf33d279
SSDEEP

384:w0DWrLOIkkAutEhxACgo0dVsa8h8NIIUKfI4nP7JPx:w0DYb13vW8NzBPx

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2460	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2460	AcroRd32.exe
2460	AcroRd32.exe
2460	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\RANGE-02062024231833.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a8f45f1d45ee6db6d63301bab1aef449

SHA1
8a1532179e786a4abbe4e54894360399e2cb43ed

SHA256
d472b0fb502d54c5ea73e269986838945c47ec260e114f63a6714025dfeecadb

SHA512
34e19afc225229dfab7703c609993f5f03c11aaaf45861a4cd000a179892487b771a36b50c5fb802158cd4577cca628545e1bf0cc507026337fd730e189dfe3a

Download Submit