2c3eab3fe3cc00b8bfa9172903ce189b01ea1d23062683dd973552dec1d82b67 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 17:52

Sharing

Report Analysis Logs

General

Target

3aadc87330ac5912cd20d80239be72d0.pdf
Size

17KB
MD5

3aadc87330ac5912cd20d80239be72d0
SHA1

355544ec4f0c7f51522d78446e47de79a36e951c
SHA256

2c3eab3fe3cc00b8bfa9172903ce189b01ea1d23062683dd973552dec1d82b67
SHA512

2ac1064f1855866a5e9a5098fd7857000bc1f14ae6d61a2257da9f577c6a80e5d3c88e6add837f42bfbe657c58f633a20b1c0606e6f0e0cd09bafc25773c9330
SSDEEP

384:9Bb85al1ht2Gs+s6ccGeSnixHh6L+wi9cAWTp:fp1Brslcd1xM+wi9cAi

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1964	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1964	AcroRd32.exe
1964	AcroRd32.exe
1964	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3aadc87330ac5912cd20d80239be72d0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7c1fdaa8ad080e0e08d97c8f83e761b9

SHA1
0effa9b3d74cef8f0f5ae1cc8efb448e2a03afc0

SHA256
d65bd39216d34cea5d388b8c2a98c6b8208aad57bc06f991edd9418b100dc0df

SHA512
06be5c92b87f275dd4a9898e08cf0a311f54bbf9244598a417dd985cca5cebea60340a7976a40d0d7af7bee6d54373f4c1d82dff07c1f4094542cb9273d0c684

Download Submit