716d766597a7d3a621679520880ab578895a67c8ebe083739345a5247bf81c8e | Triage

Analysis

max time kernel
121s
max time network
135s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 23:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3b60ec102faed15d23230b6c4c5ee4c3.pdf
Size

33KB
MD5

3b60ec102faed15d23230b6c4c5ee4c3
SHA1

6b018c291a5da636703179702326d4023d23841b
SHA256

716d766597a7d3a621679520880ab578895a67c8ebe083739345a5247bf81c8e
SHA512

e5eaaba30ba4511ac26e72b19b17259a5f40337e2c26690d5aa789b8e9f5a213b7d594b80bd5ec56169c716a8ed341adcbeb4806f49c8c19892f54467db6a6ce
SSDEEP

768:hzWlQizpOvXnW6EO4OvwwL02DgimU4f3r:heAvnarOIwLDcimX3r

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1516	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1516	AcroRd32.exe
1516	AcroRd32.exe
1516	AcroRd32.exe
1516	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3b60ec102faed15d23230b6c4c5ee4c3.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a2e47757026b773b4e03e0497ae13718

SHA1
a1999d956950548d426aff6843f32b16d6239761

SHA256
de6807c3719eedee8797493cc4fc17a19591d16b441be0974581d5b4344e905a

SHA512
03f39c1e046831555b14e4935d8d7d38c76fe2a288d6b83196c3e7b2bb0fd1cfe75c550da1445ab5cb1b9d754762824867a76dea5dfd19b99cad263d388884cb

Download Submit