bd4939e02a7da437e1d01a49b76805cf587ae0250d41986f4c791ad32898c614 | Triage

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/06/2024, 12:57

Sharing

Report Analysis Logs

General

Target

info-06-2010-MhGnnHClx1.pdf
Size

218KB
MD5

5091d6f817d13a24f478f1959bf17379
SHA1

7f3fd6c511b78228ba54a59b19bfc2c1dde1356b
SHA256

bd4939e02a7da437e1d01a49b76805cf587ae0250d41986f4c791ad32898c614
SHA512

d35dbd6431ca3fd2fdf7a86cc2c1922052cdeeeb655bc102426f984394df698e0cdbfc9249ce48733a5ac32f188d4b24f8026505d34ee07d9d8fa485c2c69cb4
SSDEEP

6144:PxA8bsxT4qLcb+qraLoZHi8uw1p+ZM0rr:iTcb+qrNZl1pKH/

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2744	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2744	AcroRd32.exe
2744	AcroRd32.exe
2744	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\info-06-2010-MhGnnHClx1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
92af2c7423b1393d0384ebb34ab6b894

SHA1
7c328b3bb4ce48e9f6e79d1d3cedcad9f7ea8de7

SHA256
cc1e7b3c4cb9b76ed5ad2e719479048f445faf38c40bc1b2de07dd7d9f47c690

SHA512
4c7861827ec5b7de8451e69315d2398e492e747b014eab94815e3f5243e38e4ca44573b174115c231b5ea7d947db05c8ebfd28c05b4bd2a17a1859488a3e6a83

Download Submit