7ad39bfaf9ce17c54262523ec8c76e597f870b29226f40a10f8d4df03c308d4d | Triage

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
29-06-2024 06:52

Sharing

Report Analysis Logs

General

Target

MemAcc.pdf
Size

215KB
MD5

25ce1aa840894854c2ce0ed9a6bfa718
SHA1

e38ce0aacfbae37c325319d62a085327a680e2d0
SHA256

c403f8dbaf34897bb285ec891f0989f33c8ed36a4dc278996c6ac7d4a7ea7ccb
SHA512

e8177cb561259f05f30f0b4e08afeb52b7b8186610251460bd08c85b72891542c8c4c0db9f44e34957e7ee50853ce2c413d3257a0c7c3c6759f3f39af21fb9bb
SSDEEP

6144:05+mtFQUe23/ckJ+LDNBNYEUpGSDdTYhULhDHQCdLw:4+mPPe23/3IezGSDdTYhUVDH/U

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2936 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2936 AcroRd32.exe
2936 AcroRd32.exe
2936 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MemAcc.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2936

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
73dabe187970d0a1025b3bf4f84551a4

SHA1
efd6de598d5163e29cb86a634706ac4c99fded73

SHA256
7bba217a69046d1067c8e0e84a1f3c05df504160f4febf30e49fca005e4f02bb

SHA512
06b0a7b1763ce9ee7cfb73295def5b048daceebaf0e54d5400b816aada22cdeb5725ea51913a6f342d8b9bd3540f0e27194395e5237187e3559c1470bdc453cb

Download Submit