525a2eb43f2a4c702213723541335dc0391b42a01177e1faf5873e0cb7540ce0 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
02-07-2024 09:27

Sharing

Report Analysis Logs

General

Target

EUPL-EN.pdf
Size

33KB
MD5

254b5ddbc15269e72ba3a0508681a70c
SHA1

2263ae4c0b71bf7be09707d8ffe1176807e8c69e
SHA256

cd5d9e2a925d8daa92d083fd8c1cea48df1bcfffd857f4f93e2148fddc5001ec
SHA512

9bb5a4bf1b5167725e2126ce5152e3be11b7288c743c0d7c71b98d0551e47bce417b0b1c0a14ff523a7c90ec9d0b930a0879b31b22f10b0a068f635103faf504
SSDEEP

768:XWSMyoY3GnGTmerMqJoOunEg5ADW7+1DTsPVMAgjTLRzp/rFQ248gYT23:/93GXovsE+Anm+hJrZL23

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2284 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2284 AcroRd32.exe
2284 AcroRd32.exe
2284 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\EUPL-EN.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2284

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
41e631fb2c40aabf4b5f6d39a5cc3a02

SHA1
d11682aa89abc1acde0469f31a1577ad48470b0c

SHA256
8cee9b901ee4d2108c8ab5c328be4bea5d4c11fdf1f365e6af6fa39b76c443c7

SHA512
26ee337248c3a73c99b484426f48572d426d4e457d7cb40a4e2dfe200125deb840b52c921ab8c572557fd16791fb6982ad63661b67efd6c9b7aebe019d19c177

Download Submit