80890ffa077d3e15f60a97fdcf9b0f432e04cc060809389456ecafd729b522b7 | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/12/2023, 14:00

Sharing

Report Analysis Logs

General

Target

3c4d74fcc5f56c582278d9bb1aeaeaa3.pdf
Size

100KB
MD5

3c4d74fcc5f56c582278d9bb1aeaeaa3
SHA1

564e2c7a57e9778af0fa80b6be32cbe66cc7d638
SHA256

80890ffa077d3e15f60a97fdcf9b0f432e04cc060809389456ecafd729b522b7
SHA512

8b3c726173d01de9784bbef502943b7c78ef8f63e4fa979f75ccbdf210cf79166ad939b2c1e3e6382df8575446b09966fd7a5858be7353aa4239b1c359c8c23f
SSDEEP

3072:cbOflB+gB5mmZ8Q9IS+NQ0D7wdN/9tHm/amXeVZ4:aAlZammgU/y/9tdmOs

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1288	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1288	AcroRd32.exe
1288	AcroRd32.exe
1288	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3c4d74fcc5f56c582278d9bb1aeaeaa3.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b14596c98af2d9d8c5ab975c1e54bff9

SHA1
f8b97e3b01d9bc51fb81f3ccb169dcf4718d150b

SHA256
efdfb4cadca1d5032fcbf8355aaae387637e970664ba8f4fde0573d0dceaae46

SHA512
cc802cdf7999c516d01980a9a15d27b6bdc78e7aaafa40425c2353df2a6a2a11afd9fee5a6d60911f5f9afe687294f68a8db0f48e18bbf7c41b6770c544a1b81

Download Submit