99c9c43c69288f5f338e77fcd9b876733aafe603d9cf8b536da292b0d69434e1 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
30-06-2024 16:09

Sharing

Report Analysis Logs

General

Target

VillaFlorida 240622.pdf
Size

136KB
MD5

01277d041c55bbc7911b14394816658d
SHA1

a1c2d212a2ba2df5d24965accae9c5f9a5614328
SHA256

99c9c43c69288f5f338e77fcd9b876733aafe603d9cf8b536da292b0d69434e1
SHA512

4755186a684383ff04cbc6d01c6df40c6edbd33993d0012c217dc52bcec66a8ca427c6bbd0bbdf47f6386e508376778b57a72f01df7be91667de6d621e16669b
SSDEEP

3072:p78Oud0UMUdaWyacB0LqLaP9uXnAuIbvyntTnxRdHo3Az:Z8OuNMUdCacQPUXAuhnfE3Az

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1992 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1992 AcroRd32.exe
1992 AcroRd32.exe
1992 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\VillaFlorida 240622.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1992

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
31c50652951ec178454a8bed264e800a

SHA1
36fcf86720bd74d96d6405c9e1e67727d977bab7

SHA256
71c4404ae5b0cd06a70d94734ae390e4482c599a87b1816c482f29e5b0679127

SHA512
dc48f4e75e1c5c11b7baed588691a23ef7714e0844f0e1cf8e2546b4399ade98481d31db1c4ee0eb17abe0d22f40be89dc5df20d2e1db78ef8bb4d0b06352f3f

Download Submit