8a03c9fe6a205eea3e927096bcc7cbc4c696b0d61a3ce42feeea1e461d2b4983 | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 14:22

Sharing

Report Analysis Logs

General

Target

39a8a5a7e4a0820a082a4cc076e34308.pdf
Size

103KB
MD5

39a8a5a7e4a0820a082a4cc076e34308
SHA1

b63492b91444ddfea2cfffb3ba9f7f2caafecf7a
SHA256

8a03c9fe6a205eea3e927096bcc7cbc4c696b0d61a3ce42feeea1e461d2b4983
SHA512

6e945c29a0598215363f89e1142c1cc00e631d680782dcc32274bf3d276cda4a681dddb1565ec17d632c2089c71ad9b14980829e93df3b6cb4f71a90ed4956fe
SSDEEP

3072:k3pmtkxK2oTHvscKFQuWk3kAFgj4YDGzXTfqH2ic1:kZTJMsx3ObGzXT4W

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3032	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3032	AcroRd32.exe
3032	AcroRd32.exe
3032	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\39a8a5a7e4a0820a082a4cc076e34308.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
62f500a3051cecd8578e64cf149f22d2

SHA1
3d2b1efcd39a774bf639abe13e367dcc6ceb65c2

SHA256
ccb849448b6f162ba92c4ba0cd44f1943cd8faba8e7bb23df1612fcd643f90a6

SHA512
58904ea85cc70b3047662d9340b04dd641dda974fcca262790a80f1be8d7300f35dbddb4fc1c34aca267ef75f1d2dcad6672c418a423e3cf9dee2b2b1e18aa16

Download Submit