3d99cbc938474256f690f1fc8b91fe7433e71c45b63ead016e0608ce91731399 | Triage

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/12/2023, 11:12

Sharing

Report Analysis Logs

General

Target

113403317bc34d2d20f1a95ce60a090a.pdf
Size

100KB
MD5

113403317bc34d2d20f1a95ce60a090a
SHA1

f7e69f455d7f47efdc50c4c4c53a44872d9a9740
SHA256

3d99cbc938474256f690f1fc8b91fe7433e71c45b63ead016e0608ce91731399
SHA512

bbcc15484920a60c1d1e1aca7d5e53dfba0515734cc53b981b2b48f73ca75e075dfde4b3f2d03f497daa68b707aa191236f34dc00d52761d6d65d5ee8d7cbb88
SSDEEP

3072:eGhZ1tJSU4Yybi9JAZyz02nPEimQC287TtS:eWdSB6E05

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3012	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3012	AcroRd32.exe
3012	AcroRd32.exe
3012	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\113403317bc34d2d20f1a95ce60a090a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
8eec8f1768edeee97790f8f056665495

SHA1
58797658ab8c769de3dea57c45ca8e09e1eaad0d

SHA256
6e10743b88da8af44ae47ff4ce8b14c37ba3d6af2ccf656076644c15d14ae782

SHA512
a2cff59096d788b6291494032234b44315d0a2df84ddb443aa1a35a3785ecdb7dc0f724712f6a92e730eafc814a654402ea782cdaf3d3fdc9f986daa3edb99da

Download Submit