61cc9abeb89b9ae51dc3e4401b692cab617ad4d7d9d2fc9ccc60b5076cd37154 | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
19-06-2024 16:12

Sharing

Report Analysis Logs

General

Target

2213993.pdf
Size

58KB
MD5

9789ed82395873dc72adb8d0c7258001
SHA1

a03013408648b55910a33c4cf265f2a327a0133f
SHA256

61cc9abeb89b9ae51dc3e4401b692cab617ad4d7d9d2fc9ccc60b5076cd37154
SHA512

b8b3fe5d91c5edb82edf3308d77930ec5cdfc8030569e2e5a84021f34082b90117bc4924cbce5b73e5bd68a39952be6e3324300e9d16e721a0004026501be3af
SSDEEP

1536:sMMhM7sQeZK5IfV1uKOOvvDwOSwcNnYnMjkUlfDiD:stM7sQ4KGV3vvDOJ94an7A

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1848	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1848	AcroRd32.exe
1848	AcroRd32.exe
1848	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2213993.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e8df7eb68f49e15433019994eb8cdc2e

SHA1
e524ececf6a6e9069cf2a076869b7886c1cc0f30

SHA256
7fa2e50b804a3809674005cc0f35dca8ea1960aa2b22f28fdaddd4fe26d7698b

SHA512
347b7f4e44742083f30b1b2f4b83452cbf5878dc061b93255056c484633016d27347b01b40ad4939911a2446f3311298821995940404a167448c08091520b3d8

Download Submit