ad1865436cb934e790789696fb31968fe554525017dfd0d8550928490b6ffd31 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
14-06-2024 16:25

Sharing

Report Analysis Logs

General

Target

1280373.pdf
Size

112KB
MD5

73372b84c7da9cc80f56704f74169a58
SHA1

0b746c3b1f781fe873f8a3c487beeb83db4e1dd3
SHA256

ad1865436cb934e790789696fb31968fe554525017dfd0d8550928490b6ffd31
SHA512

12c4d97b14ebb5a46dc8dc8ac9b818f45432edd7007bb54074e64c6124e8768d890143a241e77b4df5fefcca2391f3fa26781293710d9a83e228dc0de942e271
SSDEEP

3072:mbdtf9xp1yJJiGuiypLmDAFnrwqmA2Iw0j6nLmUe:mbbp4JJiGuiyZkwn7e0eLle

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2768	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2768	AcroRd32.exe
2768	AcroRd32.exe
2768	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1280373.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
770b1a6618d4b3616b1ad615aa5d3bdd

SHA1
38e505e13fb010b8b952ff07835a1e450dad13ae

SHA256
6fc726c1f86615d53fc055c988fb6c6c26a772bad6fc208ca54620222dc0282a

SHA512
412276862a1e2df734cfda22875d9ceb68f461b6d07a4809489d343819fce078c6f926159633fa1bf7c3d74e6894735ddcbb0928cbd6021069c197c1b90ce1ee

Download Submit