2f2ba8667409c4137961df475165f1cce3a6036e417a91629ac0f480cb9dc23a | Triage

Analysis

max time kernel
94s
max time network
17s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
20/07/2024, 06:50

Sharing

Report Analysis Logs

General

Target

5f43bbd731e117ba47ba85f43b959160N.pdf
Size

269KB
MD5

5f43bbd731e117ba47ba85f43b959160
SHA1

17ace4db852f53cff8876ede22b9d2e8d4773f88
SHA256

2f2ba8667409c4137961df475165f1cce3a6036e417a91629ac0f480cb9dc23a
SHA512

b52fe6d0cb764c2a397436d75c85d6bb1f231adff7b7ff91459dcff03e64efb67b5220f26d8d7d3f3e273aba2e7a4dc7e1e4a0bd15529bbfc8d9a631e9622591
SSDEEP

6144:8eKUnR3M356JdjCxGyVKeU1wYswd4oiXi:8sndyQvwYROoiy

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2688	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2688	AcroRd32.exe
2688	AcroRd32.exe
2688	AcroRd32.exe
2688	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5f43bbd731e117ba47ba85f43b959160N.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1c23da67c9a4ac7c1426e0434e5d8373

SHA1
d5c848284592acc5d0181ad42fa595257a49e861

SHA256
55e87dad3cf9acf754b4d857302df027427e5a60965ad9321ae9452f61be29e6

SHA512
30234f834234d69274247afdb82097c14e9178439ff7f8219b2ed720e45f5882ee4de92fac8f4616a2f5d2153451f3a79f0369be9ab394e26d0096906d34a259

Download Submit