3b96515cb6570ad679c77c16e6afed7dafefcd859d0ab9e19e65a3c2bc7efbc8 | Triage

Analysis

max time kernel
121s
max time network
130s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 16:59

Sharing

Report Analysis Logs

General

Target

fa344a35f3f2c996f47650fd4d7b19f4.pdf
Size

35KB
MD5

fa344a35f3f2c996f47650fd4d7b19f4
SHA1

f901a333ebc1e3b3a9d8b9b06f879e3932bed6b1
SHA256

3b96515cb6570ad679c77c16e6afed7dafefcd859d0ab9e19e65a3c2bc7efbc8
SHA512

71c2f59863bc45e6341c40dcf2991b6254280888ea431d6033ad6df72af37e47a56501b305d505d2247e911dcf602408163ffab669b158fb783ccc53dd457273
SSDEEP

768:iinSTrsgSYrBeaSi/x2WxkxO94ETJRWewm:JnST//Si5lWxVyeen

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2908	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2908	AcroRd32.exe
2908	AcroRd32.exe
2908	AcroRd32.exe
2908	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fa344a35f3f2c996f47650fd4d7b19f4.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
15821c7df639299cca7c04460399b0a7

SHA1
b7d470096acdfb8fa515cefcf80760322ee2bc9b

SHA256
851008c8d3623ebb1d88dd773fbbacfacaa44921d9ff9f2983e7e4f3024246b6

SHA512
be0b24faa8a3f2770027f669ca96d7181a3dd9c424a8341d9f0a61d53fe4faa0ac1a11c1aeec3d8e39d7bcedfb188c34a1c79ee00b4be52d0e0554ce1e5861fc

Download Submit