8fe8e235cefb820f8be4c701b2371a8ac39c44bfdf5b7f71881f3f23edfd4788 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
08/07/2024, 06:57

Sharing

Report Analysis Logs

General

Target

commercial.pdf
Size

43KB
MD5

dc0c3e918ec0349a40d51a1dfaf3968b
SHA1

f7c0017d1c6b135561d24aa59ac465767754580d
SHA256

fd8b4394a5719c51af42457d5f690709c0412e02075ce20b278e87600c847134
SHA512

588f98e3ffdd27d49abb3e12f74605c633f0b19019ad0305d6a962e26e32184ee41a27d829b3fa85504583d524639eb840861d8a71fb28586eecbda58b18875a
SSDEEP

768:nKcs62p3FoZZ54WTNu/leGRcadcGpZhhRaNESgxFhFw8if8+kuKIo:K56630JButesHDpXhRLRGFUuKIo

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2676	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2676	AcroRd32.exe
2676	AcroRd32.exe
2676	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\commercial.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
8de655c6dfccf299ba71cdda295c2b6a

SHA1
b6f55b3489ee55ac86cd5466381c74e1d19f34aa

SHA256
416f4b52da23e27bfb79ed6fd864c5cd4a54562638382ff0a66a7ee6e8e92eaa

SHA512
0a2612401268e6cc7aa91866837761c6f85b91347edc83c12dfee862d7916f5c655a8e52659669f5837cea0503fe0bbac3dc638cb662ec4eb1fbb26e5e531ff3

Download Submit