396fa41e0315163aa2cb41de41ac7ab89047483b0106e3f0fb1a4db3cb86f1e6 | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 13:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

37eea4beba9bcff84a4f72cbed2305e1.pdf
Size

31KB
MD5

37eea4beba9bcff84a4f72cbed2305e1
SHA1

de59d73304a472b18e5f1750d0f0d3cddd4dd03a
SHA256

396fa41e0315163aa2cb41de41ac7ab89047483b0106e3f0fb1a4db3cb86f1e6
SHA512

9887cbc6d9d67f548b20572c24c154f3172260ee641211b39b82b27b780fed6b67e5f681acacc1a62c196eb13f8e5e27c9233a46d1012533b9a476f84b9455d9
SSDEEP

768:t2rL6YSkzNZBSlDARHUqfmkbiS9ki5C2OiQ:ttHGNZBSlDARHdfJbiskijhQ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2536	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2536	AcroRd32.exe
2536	AcroRd32.exe
2536	AcroRd32.exe
2536	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\37eea4beba9bcff84a4f72cbed2305e1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0047eb994ff427f9b8a9b8a71e49124f

SHA1
b1a37430daaeb61ba7ed8b3405858da7e480ec79

SHA256
adf8813b724779ccd8c51caf7bc61757070cd5156f10a01a175ce1ff3391ddf5

SHA512
3e0dac6eec37262228c2fcfeca87a407f65e34c45e5cf083a3ccf93aa618b56e99b54773299dadc8c6351e2a40a0f2258c5fc6e308689cd78dc4ae062abe0c60

Download Submit