e342380dba718d2ebdcc4b40659818dc4ff39095983d0ac1acaedee297bba46d | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
08/07/2024, 13:04

Sharing

Report Analysis Logs

General

Target

rxp500_022_157367G.pdf
Size

241KB
MD5

cb8e7f9472b5959e7f64ebe0adfb500b
SHA1

2b9d82d7aecf1d71fb69506000a8a91db02fd019
SHA256

e342380dba718d2ebdcc4b40659818dc4ff39095983d0ac1acaedee297bba46d
SHA512

eee6d2f2fed5be294e79c85dc6252c7f3b3cb235883d46e8ac55915f208347a4bb9208e3a616d281e3b1fdf23aec10fd86b4cd281e57b7526afa72122e35b162
SSDEEP

6144:4gowu8t7ZiuZ8ZqN3Kpmrp3UM5HVu1CXN4zj9:4goikuZ2qNH3UI1IkN4n9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1840	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1840	AcroRd32.exe
1840	AcroRd32.exe
1840	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\rxp500_022_157367G.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e3d4fd8f97041a0f9d0ed3112c692d05

SHA1
6d7c40be37050317c57b29cac26b44fb116a5e56

SHA256
843c2551d83cea56c779640cc6b39694e8da7965a29686086f72e9f17b182fe1

SHA512
a50cf1e652167e400d1398b65a5d19ff1d6d56ac1661509376e2e14f08526534d17d6cd60d24fcc46435afc2e4b25ba7fa9827312f10e6ec0b63067bcd82936f

Download Submit