62b46c09acc9d757d2c4968436dd5106f749f460d481c03aeb06619606167c2e | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01-01-2024 02:50

Sharing

Report Analysis Logs

General

Target

3bb276bbaa61917ca250e1b99f456f47.pdf
Size

106KB
MD5

3bb276bbaa61917ca250e1b99f456f47
SHA1

91bba2c9d02c78818c79a530c1255734282df34f
SHA256

62b46c09acc9d757d2c4968436dd5106f749f460d481c03aeb06619606167c2e
SHA512

be6529b682347840abf4ff3e43fbddcebbdbca6717f4cdead9acece760abe66a8fc44e64bf5d93f8e886ae88e7d0f0c216375c64c1b97ed44f0780ea2b2ab79e
SSDEEP

3072:e8+d9YeFEO5rq3yDYkMNW908/DJmxxb+dWuXg:elXYeGIMGLMNWq8/F0

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2920	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2920	AcroRd32.exe
2920	AcroRd32.exe
2920	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3bb276bbaa61917ca250e1b99f456f47.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
64d525f0c912dad44a9c5cfe944699ea

SHA1
106935ea5b64a5e6d2975f00b5575b600c942111

SHA256
9299a10a03527316ade126a5eca93fcbe9d6864e00025fbec0ef940cfe4347d3

SHA512
8055c88a12e7bfc5f8411923a38fb4e52cb43514ff53e650b1bf401e1510424433b4fcb20caafdf20fa75bfe9060c39e676115bcbc239200c8f8c7d1b100089c

Download Submit