f9035d0b2b16552efa8b41ed021776dacd2873395a33970e4adee074f1a55547 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
03/07/2024, 14:38

Sharing

Report Analysis Logs

General

Target

Carte_MORARD.pdf
Size

4KB
MD5

361cd403a9fb31ae8c3915b3ac026650
SHA1

2fc43872a43c735269635b70ec0da0af1d76ff81
SHA256

f9035d0b2b16552efa8b41ed021776dacd2873395a33970e4adee074f1a55547
SHA512

9d1d556ef65a9d3c410128d09a3f1c74946971b2d7140c91d4142268cd2deb3c4d17a0d149290db91b71cff98a7bf4cf9500f4ee840af8dae3f7b7c2cc59be72
SSDEEP

48:bZ2VQD49dzNLsnrCYnANXjL5xnrPnh4im9LJh4AAeEOWkLOO5ht/9Zd6V:bZ2+IdpL62jL5hnyi8JyhAWkLOeg

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2020	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2020	AcroRd32.exe
2020	AcroRd32.exe
2020	AcroRd32.exe
2020	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Carte_MORARD.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e969e65de95420f8d6c646df345a6cf5

SHA1
48991dbfee7685c4a9850610532141c77d9d3c20

SHA256
b056f789c88ed38bab762f677f7a1bd657d148b220bd4c4eaad5fe4fea7906e6

SHA512
9bac771e378d754f0d13d4673cbd2f9145c82b7d7c5567780795d49c3b13cd297b5fe84da257cd713742c427937d253c2a69023b7e1c4124c21be298f571f087

Download Submit