24fd52b9898a502c08bc1115996fbf947be3af1a4f2f3b5b87dce5fc33fd157e | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 20:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3aeef91f47cd808bad56db286b1575a9.pdf
Size

114KB
MD5

3aeef91f47cd808bad56db286b1575a9
SHA1

05df399d8b8e5205ba20cd32afa3f20ce4b3cb4f
SHA256

24fd52b9898a502c08bc1115996fbf947be3af1a4f2f3b5b87dce5fc33fd157e
SHA512

25767c6e2ce4df53cf92073254d9f314c837297b99b3489222a1859ab9e5cbd7f3c25b972c1f5b8bfbc0c1da78951ee68ced185997ef5e30fc264a61c63923f2
SSDEEP

3072:bu8kH5ZUDmNbqVMqrwLXZwHX7BEWtesDOuRQ:tiMaVsMUwW376WPi

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2088	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2088	AcroRd32.exe
2088	AcroRd32.exe
2088	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3aeef91f47cd808bad56db286b1575a9.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
442daa3307d3cbf33de916ae7ef81863

SHA1
62682f929abc22dc9b63168dddd4011ea37af3c7

SHA256
97b88e7c88458d19a0404f3436e3d9031aa4c1458fcc987811e57be1374d3cb0

SHA512
00ec2b17b9afc9d19dcac50fae0bdc4983d01ef80362322abd14c53be57daa435371289ae3515d18d9f4888814257332d596281d04cb88a4c649e250dc915c9b

Download Submit