395434958311b4ab71161692f560058dd49df2f273dc711d08b9770aa385f87f | Triage

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 12:53

Sharing

Report Analysis Logs

General

Target

36d3f708733311b9c69b0a145075768f.pdf
Size

33KB
MD5

36d3f708733311b9c69b0a145075768f
SHA1

c8c90aa5c578839d66d28241bee58553840619ae
SHA256

395434958311b4ab71161692f560058dd49df2f273dc711d08b9770aa385f87f
SHA512

fa902385b65a6732ef2c2cdba5b1f2ec6edab55596e33e760199a6950f2c154807b5815280bf44868c513ca6f3b140588f34af254824f23ee1aa6a12049b728a
SSDEEP

768:JW2KhHMhTX3RiofCyvMLDDYaBqpDxh9DT2w:JWVhsnRJfCyvMXDYaBsDxTDT2w

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1748	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1748	AcroRd32.exe
1748	AcroRd32.exe
1748	AcroRd32.exe
1748	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\36d3f708733311b9c69b0a145075768f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
fee309db01d069bade9bbbcd485ea8ed

SHA1
122b2fc6839d6228f64c3456ee84d1a019321653

SHA256
ee9171a7e6bc8b49d8e9aa66ce1f4edce0db6cc6e82f2341b7484516fcb05df3

SHA512
6dd67837fc68c7d0ab2bd12962da8067cc773a1077db0ba394f90ab4243de928621e063d3a2390495a4feb2483a9376159e1071583b137a7cbb230862ec7e618

Download Submit