c97f7c7e31ccbe4f7414f36e6f2a62dad96696b34eac22ed7c9df9898c901339 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
20/06/2024, 05:04

Sharing

Report Analysis Logs

General

Target

ST Catalog.pdf
Size

4.7MB
MD5

60c94b8b04598c4f6bcce3346dd22582
SHA1

4f3d22f8481f09bb2042c7f5adfbf84e700b3198
SHA256

c97f7c7e31ccbe4f7414f36e6f2a62dad96696b34eac22ed7c9df9898c901339
SHA512

a0b714bc2bcbd5783296101c6d3046aeb743056699c764e235f14863808f81a7a5086cf54a67817ef8e2b083341b167d5d6eedece766091a9945cf1db9b44198
SSDEEP

98304:ErqLRBdacA+1A5KUc4hf46Xg3q/NsE0Fp74xTaLVznv8LsAsn:ZLvKN46XIINsP0eVzn5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1680	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1680	AcroRd32.exe
1680	AcroRd32.exe
1680	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ST Catalog.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
05a7bd2a5089ad1c91686ef78babbf49

SHA1
4ff3fc00554032f3acdb7aacc71ec39949d92d4f

SHA256
cf2fffa5995d7aac0510eec680311c78431d5f76844791b75e3c55cdda8de1db

SHA512
c5f3a9eec52092c83b7366ec268259a0973790844a530643183cfd2de578316625b4e4fc4343408c80f123e7246ea9a2186b0894b0f44de8ecc4986cddd6cc7d

Download Submit