36bff220199c1f94c1f9465ad8e000464c5e8d1bdd4f3b4f68d5b233bdab32c8 | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 05:25

Sharing

Report Analysis Logs

General

Target

29ea15ec11efc0895c06b347d2600a2c.pdf
Size

103KB
MD5

29ea15ec11efc0895c06b347d2600a2c
SHA1

e57bfd6c224516a794a9d45e085ddfe48188e4f1
SHA256

36bff220199c1f94c1f9465ad8e000464c5e8d1bdd4f3b4f68d5b233bdab32c8
SHA512

9c9c6f150f4762148cfa9ab4ec990bba4f6058fc0e722d9b0038c48e4a7425c4dfb896dde29109644b1c52735ec62d2fe25080e3486269e53dc713e2d28e31c4
SSDEEP

3072:Hi1EDob8fETEHxnR2lMcRJlD2RPjcIUFNVgLU:HiAob8fET+YMcWLRSp

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2896	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2896	AcroRd32.exe
2896	AcroRd32.exe
2896	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\29ea15ec11efc0895c06b347d2600a2c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads