3ca994932b5ab6e426cfa2c7338cb80f6d0a0dc15817c8da0528433d4ca878dc | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 00:20

Sharing

Report Analysis Logs

General

Target

08531026ee131cfcccc2481c7f2810d9.pdf
Size

34KB
MD5

08531026ee131cfcccc2481c7f2810d9
SHA1

c6ec7ffca0c798309a40b078a5ce033ae5b522d2
SHA256

3ca994932b5ab6e426cfa2c7338cb80f6d0a0dc15817c8da0528433d4ca878dc
SHA512

f9c8d149ce2cf5b311b450ff8accfea182d7d5a5f4b5ce3f5e2ceaa31aed1df14e4a924c7edf72a713b8d542501a57fc6969d8d372d90da1b0516ad104e3175f
SSDEEP

768:V/6hVgRJDsAeB68XAkLrpUq4s42jzKcuaLn5eZFZgO6:V/cgf8TRnE2jzNL5Gvgt

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2052	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2052	AcroRd32.exe
2052	AcroRd32.exe
2052	AcroRd32.exe
2052	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08531026ee131cfcccc2481c7f2810d9.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
374780a18964663130a7a68e9df82195

SHA1
05dda26a476542228105aafdaeb0ebac67f9f947

SHA256
e2152dfa6aec4e8a8a2427be7ace51baf3b796937fe647e91cd119bba896dd14

SHA512
421b2c7ba808021ff7a693992ed4a14ba3ae03f83f096e641abe8bf36bcb34f5b8970e31783085e91bbe6b8f913d232b216f2da26acef335fe73b9d48d3d4f0d

Download Submit