3bea115a138b5c8bd69d89bac342edb54a1fd26f7908f5eef7a721a3ccbb13b0 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 22:22

Sharing

Report Analysis Logs

General

Target

1e561f3f90f46b6ee4802712a884aded.pdf
Size

44KB
MD5

1e561f3f90f46b6ee4802712a884aded
SHA1

23e2a4b6ab5fec1974aa8e19e567a8337a936b4b
SHA256

3bea115a138b5c8bd69d89bac342edb54a1fd26f7908f5eef7a721a3ccbb13b0
SHA512

f2f03a2c53aa8468bcace1921dc32bbf055a1e6cbd768a9aff4fe520e72deac12222c7fbe09e1f37280bc049800c94b9f60d16b27d96e648196cdee250257bd9
SSDEEP

768:X5sS/hRQVPWpOKjmq5KQWHmFPeE939yZb/jBXEKs:X5sS/hRjpO4jWHcDQhXEKs

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2924	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2924	AcroRd32.exe
2924	AcroRd32.exe
2924	AcroRd32.exe
2924	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1e561f3f90f46b6ee4802712a884aded.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads