89753a729d827cda9d50c4ffbe08c9db4d7d07bafb711f11816416bf176d2192 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
14-06-2024 21:44

Sharing

Report Analysis Logs

General

Target

17th -23rd June 2024.pdf
Size

1.1MB
MD5

39397509d8a5c93ee0a745910342e85e
SHA1

dc338482e489bcb8c53c18448dd5f426e27e5791
SHA256

89753a729d827cda9d50c4ffbe08c9db4d7d07bafb711f11816416bf176d2192
SHA512

919596b33e37075c255fbaa5a1abf6eb6917ca9e143911f646d9a3681c8259389b63292fa27405bf5011d2a5c0c70f7151fe61b76a789504a7e1d537236bf5ac
SSDEEP

24576:EUfl0COadrBIO7ToFtJaUY12b2w75AmG/8L0BT+OawBEzUdvHUk:h7TMtIBhwBaT+OawBQUd9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1804	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1804	AcroRd32.exe
1804	AcroRd32.exe
1804	AcroRd32.exe
1804	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\17th -23rd June 2024.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4a30e42e8cda0a4b82bc4cefd08455e9

SHA1
44117703598ddb5dad321c26d004ae81667dc4f8

SHA256
0f6d9f8f5f2012de248650eaaacb5c6fe19df10cbeb60f7313a7017652de52db

SHA512
2d35faf21b1a55c4b717782085bace30164c4657f1496fde893ffd40e5e8e8de7671961f304aa242d1c051b1365b8ef7074c870d9acdcc763444e767444267d0

Download Submit