70443ffd2580fc5a2583ce96df98edc24db3ca3df8dbdf51ffcead063b48847b | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
05/06/2024, 14:28

Sharing

Report Analysis Logs

General

Target

Kent-Camp-Info-2024.pdf
Size

55KB
MD5

7e20a91f3160aced5ed7976c89a0f9cf
SHA1

e7458e5c8d282d8949f7f41ded2bf3cb06f54a78
SHA256

70443ffd2580fc5a2583ce96df98edc24db3ca3df8dbdf51ffcead063b48847b
SHA512

2588febeb33827da8683647110c0950c305fbadb8ece8b33bb481523cdbe8cfa1b718d59d5be0ea4f656866c9899555b93aecf4f9111e943dcfdca9324067968
SSDEEP

1536:TXffv4xRqYi6AcBd2WHSec52mdb8U6HGdf6xL8jm4B:Tv3SoYi6jBZHm2md4qI58l

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2264	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2264	AcroRd32.exe
2264	AcroRd32.exe
2264	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Kent-Camp-Info-2024.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a3321f5c72d9c01adb6e2348d75ed61c

SHA1
c77e20e6d6dd14d62356736a8e34c1f96f1f7c3f

SHA256
5b586ecfb35c23ad54078e3f52b6e259f2e6959d9913ed6f0793cab23eff76ce

SHA512
57c05004ba8222839d6c9dc0d2edd16d7aedfd967131c33cdce9df1be9519a557e936f4861b053402793c026e602814900065493e9006b9572b7c1877c798c50

Download Submit