6e9f13b88360ad0fbe19252871279fe7ff86c7adbacd994599aa259c9d9a71e1 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
30-06-2024 13:18

Sharing

Report Analysis Logs

General

Target

Menue 27.pdf
Size

197KB
MD5

4c631f0f15594e12d7d73613b8e4ea76
SHA1

722b44f20548e0991529354de5c647eee547480c
SHA256

6e9f13b88360ad0fbe19252871279fe7ff86c7adbacd994599aa259c9d9a71e1
SHA512

eae6dd8f14a136c39cc46f85ef5eb2bf15e6f0c0ad3466836265f063a48e7407229e0b89499fbee5b51de08ab3fd258e43a77efeffffd0e60e25637c248e15d4
SSDEEP

6144:k5OOHqLFq/O9Ptbpz1iRJ0scU42yawddTV2N4:k5OpZq29vz1Oev20zcN4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2480 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2480 AcroRd32.exe
2480 AcroRd32.exe
2480 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Menue 27.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2480

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
39c1c1e36bd93b49f369963222e7f7a6

SHA1
c3875e6fd61164e318f98f3d5452af3d4b53693f

SHA256
9385abb2eb0f5c87e1cae8565e7ba3f079d9ada7b265f79fd7224683b7c7d456

SHA512
0cf0394a29cd468847ea254b38e849ca81cf7ab175d4d2b66f43c6c05e9fac45eb8211e5f4c06377fc731da8bd47450c69de206a11ece111978ae772488578a5

Download Submit