21be9cf4a1b51495426aee6041f1e14a294891a9e6086a5ad58bd845cb605730 | Triage

Analysis

max time kernel
95s
max time network
19s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
13/07/2024, 02:07

Sharing

Report Analysis Logs

General

Target

2f38e28c6dd813c89778b9e08812eb60N.pdf
Size

38KB
MD5

2f38e28c6dd813c89778b9e08812eb60
SHA1

c9c9bbe38ac1a2ebad3f498dcc37ecb07a91f44f
SHA256

21be9cf4a1b51495426aee6041f1e14a294891a9e6086a5ad58bd845cb605730
SHA512

9697745fef417efbc49dcfeb2e7697daa4fc1ca640f55f852d0456bd0728d0f7298f532e317f4b7822b50db4f8ae644fd5abbb7665d45d45ad9c23590122115d
SSDEEP

768:50E3d0Z1Nio4GB9Sy8dZrOubdUCGXyqI7BjNPzs9a:B2zB9fwBGHI7BjNLs9a

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2388	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2388	AcroRd32.exe
2388	AcroRd32.exe
2388	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2f38e28c6dd813c89778b9e08812eb60N.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e6f21d5c51dd3fd44df4698273440fde

SHA1
8e37ab87de3c31862a186676113769ef64210534

SHA256
dfe8a66dd870dbe343e2e011b5593b5c611f4d59c2fef5f15f100a7afb8a191f

SHA512
72851345abcd1a91120abb3bf184e267c52785b0122d4705f6d6fe27441c28d191a1d90c0cb9e61b93e6e9754c6bafaedbee247ed8a9c4a75ad1383d1e2196a8

Download Submit