0166a7268f744213e3a70d75965648b26813b3dbf3be2b597770e6c140a1b572 | Triage

Analysis

max time kernel
94s
max time network
16s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
19-07-2024 11:45

Sharing

Report Analysis Logs

General

Target

8eb255b161bc28ca4b4787b7474737f0N.pdf
Size

67KB
MD5

8eb255b161bc28ca4b4787b7474737f0
SHA1

b4b00fc3ac2dfd215b017b2f5d54c6c66b722609
SHA256

0166a7268f744213e3a70d75965648b26813b3dbf3be2b597770e6c140a1b572
SHA512

3cd7b207278ee87b618420009ba74b69104a265a47adad4bceaef63b51740869316f44c87e0de9a7ac2771d63f9d7d3c01a332fc79252eedeecb3fa798e78f47
SSDEEP

1536:mB/qfZksSBFNP/jCEgJscaPTHgyzKm7izZODKZ:MSfZkJP/jaJscW9KjwOZ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2452	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2452	AcroRd32.exe
2452	AcroRd32.exe
2452	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8eb255b161bc28ca4b4787b7474737f0N.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9ccee39e7cb3ab45ad257a109ace759b

SHA1
b4e1a184281374542c52d406fc4b50730b7d5f56

SHA256
9b74c33289d8d39cd380ad2b147065739bb79aaf6fa174564622e3a24097c862

SHA512
17319d2bedca2af3beab5ba800c1a4f53e209fe1df59844775fa66cceb0ab365eda144d70c3d561597fb706d1a45d7419132b8595987425f57e6e8906b380824

Download Submit