3b4722245c6b9f17a64e3566720db393b67d47df0f1e435fadbd534983e1a010 | Triage

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
08/07/2024, 09:07

Sharing

Report Analysis Logs

General

Target

agb.pdf
Size

19KB
MD5

2920f2215ad8466897482543333cda40
SHA1

52843741d71702a61ce32c573f0c7a4e77880789
SHA256

3b4722245c6b9f17a64e3566720db393b67d47df0f1e435fadbd534983e1a010
SHA512

a9b8658452135b84aceb08af1d1111fde0a123311a1708003256621e3d2a744d8ae4246c21f1689b987d2e8e21a2db2f8bf3d3e1f8e4cfe4fcc6433a12bc6304
SSDEEP

384:XF/7K0W/tC05rmHsoyJtWgt/MlI6+AcOc7eDYV8Y:XFEC05rmHsLJtWgtMTMyYVL

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2992	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2992	AcroRd32.exe
2992	AcroRd32.exe
2992	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\agb.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
048386cc55859bf6d6507a0afc50d081

SHA1
555f346cb657cfca428c57367b9405e6bf0d5095

SHA256
f9bf72cf6e0679845eebf38f93509452024d5e5bd4f511ef22b42d3dbc19934c

SHA512
7e157f4e99ad6c302b8c5a46bd1afea08a4ed57483a0e0711c9e98d0e0db5e1cddba7a8f0ace52deaa2a9db8d61257e98ca833a8533eb561079d13603a9ef820

Download Submit