2e8c1d57a145d200a1ab6f22f9ee3181da75cd4c109a858100fa0728944fc982 | Triage

Analysis

max time kernel
197s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15-07-2024 00:23

Sharing

Report Analysis Logs

General

Target

súd.pdf
Size

124KB
MD5

555682fa9b65e96e19dd49949dd6a8a2
SHA1

7e69539f5c8d2cd1d7d4dec04e0fd4056a1c2636
SHA256

2e8c1d57a145d200a1ab6f22f9ee3181da75cd4c109a858100fa0728944fc982
SHA512

bfbf5050ec9752977c2d25c17576196e6955bbf511b6d808ec44be97bc73d9b5fe64434719b770f0daaeb5f6a6139b9d9e38dec989da8eca43894e2067bc5b1f
SSDEEP

3072:qTjHtH7ADojTTrSh47pzbTYYK3SFrts/OzvZxMLhz2:ObtLjTTr+41zrKUrtsWznwy

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2352	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2352	AcroRd32.exe
2352	AcroRd32.exe
2352	AcroRd32.exe
2352	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\súd.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
452130b698e523e4f323ea49146840aa

SHA1
caf95d13d54ebeace594f0d63c3b3879294983fb

SHA256
ee8a8499fc75b981ec7eb97a4e02dbf37e287e683451094ddcceefb1427cb2b4

SHA512
df19a41648fb8ad7b10c4adaab3c172b2dda933f639a3c7017c29b33918afb6935063fd3b898679f8a3fd7289b5e0d67c7076ee5299f4e89eeaf7df237e26dfd

Download Submit