38941d9458348f1e70ffa418b78e694d8c755463050dd4ee0d1c9cc5af2d9dbe | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
19-07-2024 20:42

Sharing

Report Analysis Logs

General

Target

0695f22b33a0384b2042ab0d9cfda510N.pdf
Size

28KB
MD5

0695f22b33a0384b2042ab0d9cfda510
SHA1

7c54a7f572ee5fc42e1f3f6efa1c1f8049d9a3c2
SHA256

38941d9458348f1e70ffa418b78e694d8c755463050dd4ee0d1c9cc5af2d9dbe
SHA512

fc073cbf1b95047b01e772e8c8cc95d42095debbfa3f82e1ada31ab7a3356de5ca8c59dfae4834f4967fde298e1c6a5a2e800c33f6fda5321b9fc0c54ceea034
SSDEEP

768:VZ6parwFMzRKaujz3eS2cWROUT5xVWqiLTpcVN3W7:YHaaz3fC4UT/iLTpcVQ7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2196	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2196	AcroRd32.exe
2196	AcroRd32.exe
2196	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0695f22b33a0384b2042ab0d9cfda510N.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
372a8fa2548f73b2a6a8fed189cf222e

SHA1
b50a73e5ae7a65708f143bfed6279bcc78a45432

SHA256
b1d56e67b6d98e911b400a4d4ecdf7081dbafd3ae3fc9754728ef58c64f33c74

SHA512
b8db8261c0dd240fc387e7b450195d552f26795e2ba1546ca18b9a19ce28aed867dccdc5e88c0e4a16f771cdc6ee140eccb6e982720329c16b030daaf75ca14b

Download Submit