3e149b65eaa840fb1af5ea79d968a48cbc99cac28ed0aec2cf085e0ed303f76e | Triage

Analysis

max time kernel
118s
max time network
127s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
22-07-2024 23:01

Sharing

Report Analysis Logs

General

Target

259e0b78d85dd519136ec5668e9798c0N.pdf
Size

829KB
MD5

259e0b78d85dd519136ec5668e9798c0
SHA1

8715505ef1194b191ed3b623470a41a20962ec52
SHA256

3e149b65eaa840fb1af5ea79d968a48cbc99cac28ed0aec2cf085e0ed303f76e
SHA512

cabb3e5e197d4594bde1fe9a31a3b1a4b1211e39effb1a3ac87a56b46fcd1ac1f9916a22e1fd7c7061e155f0b383401e0a392a5b2ac10f70f6470d4268190060
SSDEEP

24576:Z8kYrLpIjBEPKOpeQe/ATZD3Hj1d/kkAwxpEY:FjhyeQe/WZTH3fAAz

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2416	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2416	AcroRd32.exe
2416	AcroRd32.exe
2416	AcroRd32.exe
2416	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\259e0b78d85dd519136ec5668e9798c0N.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ca498246843856d755ae864fac57ff1e

SHA1
99ba440c40a63bc2c8681a7a6cfd852e4fec940f

SHA256
a5cdb29025e893754da05ca764686932b3f87fb97ebe6163803795929eab55e0

SHA512
5d34a71c7719b6a2a67c613f4c7c3da8b3f67f839b31738677b05274aa888ab4ea055a28dcc28536b096fdb69b3124d0f7d759443f953446089cb4e27afbfa98

Download Submit