69813f3c8483294693512cfbd6c90a732d2aeda74924e5f67c3e560ef1ec90f5 | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
06/07/2024, 00:09

Sharing

Report Analysis Logs

General

Target

1db71559de0169fca28fc00888ce20a0.pdf
Size

491KB
MD5

1db71559de0169fca28fc00888ce20a0
SHA1

7c6b9e28ef0e6f0ea37584b373813b76f821d4a3
SHA256

69813f3c8483294693512cfbd6c90a732d2aeda74924e5f67c3e560ef1ec90f5
SHA512

244d3e696c3f2541568838b969df025e552b5520df3b6357558c6b63bd63256b584fe2ee6584439afa3e1f77a6939301d2953102beecdf76776a89d1ce3200a9
SSDEEP

12288:91Ptx4jO83msSvecSxJ6CSaJKV1F8ITIE:91Pt41232x9qt

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1952	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1952	AcroRd32.exe
1952	AcroRd32.exe
1952	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1db71559de0169fca28fc00888ce20a0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
99aa2d557e31f160bb7b96b837082625

SHA1
2e5ec60f5e4c369d9ad79f7fefbeeb6940d8b661

SHA256
4280fdfeb917b03d70ba05400ef49cac6081d5e59976821b9ad3de3e0f1d9f5c

SHA512
fa26e94f7dbc2b74919947ee3b5e4b177c2ad4b9356d61ae608bf6df7801e5806fee5522af4e78cd3da0f61aee4466ea366c196a47ba2e61890ac8b42f6782b9

Download Submit