77e508e5d15dcc46635c8531ed6202a14deafac0e9ed2412f9b02fb6609f9704 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
01/01/2024, 01:49

Sharing

Report Analysis Logs

General

Target

3b967271e3f2fda9c5f0d854b719452b.pdf
Size

34KB
MD5

3b967271e3f2fda9c5f0d854b719452b
SHA1

975a671c7fd173cc508a211d1651b2ed922a9d0c
SHA256

77e508e5d15dcc46635c8531ed6202a14deafac0e9ed2412f9b02fb6609f9704
SHA512

7fe005395994c11de25e87fdd1f924bbcdc3f4f8c527510fb2f6bbfe16a2c09bb8ca70e6ed12510e202241b8cbaa2a554af3121c81545b31108d7d1adb726e82
SSDEEP

768:OMdqf/Ggl2As7s3YiBRyswoYXMCcNzRyM6wBY70dw:OExs37R3Y8pNVyxwBBdw

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2420	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2420	AcroRd32.exe
2420	AcroRd32.exe
2420	AcroRd32.exe
2420	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3b967271e3f2fda9c5f0d854b719452b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads