032588e89f039309d6f55e4f1d7617ff643cdddb8867b43d1805683b9f223f46 | Triage

Analysis

max time kernel
95s
max time network
18s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 03:23

Sharing

Report Analysis Logs

General

Target

707e9a7f7fb22cf037a7bec57e796b50N.pdf
Size

118KB
MD5

707e9a7f7fb22cf037a7bec57e796b50
SHA1

5ebbfbd97a0aede7da2234542d2e696ea9ebf00b
SHA256

032588e89f039309d6f55e4f1d7617ff643cdddb8867b43d1805683b9f223f46
SHA512

055e24dc6b939fe70f1b7dc36a5f9e7567d2c418cc399a9fee6b5eaaf3c086293bcae0ef9cc63997bf1b2465c9f25f12b14f602b96c28b164ca8fbfb32cc7fdf
SSDEEP

3072:Bw6tnuKFFE9oZSxCwUqIraMnCu8LgTDnbNc7wmNR:IK/E/xHUxmMD6gXuV

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2468	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2468	AcroRd32.exe
2468	AcroRd32.exe
2468	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\707e9a7f7fb22cf037a7bec57e796b50N.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f222ae4d6e0df2102a9b8060109910a6

SHA1
193b36261a62ded7422c6682fdc2c98dfdda1058

SHA256
4fd4db37348282f1df193f59d086bf868616059a8a2cfde87b76bbadc3550381

SHA512
ee9cd0c465d0e00ac1df4d43caaeacf2eace1c9db48dc087bd592bbedf34c4886cdbbae10e50cd9433f60f372e7995a65cf654fb1c4c1dee932a22834b413bd1

Download Submit