f2ed4ef01d72c4c57ac59ecb67d82251c07ff37dcefee092da3e490eeb3fa746 | Triage

Analysis

max time kernel
118s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01/01/2024, 03:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3bbe98eb58fbcf76c23c44706168b6f0.pdf
Size

107KB
MD5

3bbe98eb58fbcf76c23c44706168b6f0
SHA1

dbda6b848d935f7f2f660d067e20d3f5663a6e37
SHA256

f2ed4ef01d72c4c57ac59ecb67d82251c07ff37dcefee092da3e490eeb3fa746
SHA512

7a9bba913c4b1d8a73b20018f1d4ba70fa3dafddb45918b38bfaaf7ef807eb1fdbcfc39270057e6fe7ff083140b1e86e4120f0ce0906b4754d1bf859f51aaed8
SSDEEP

3072:6lz4VZqjhS/frJ/hn1zkrAukPr66DwQ8b7:SA8A/9/DkrAB67

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1732	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1732	AcroRd32.exe
1732	AcroRd32.exe
1732	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3bbe98eb58fbcf76c23c44706168b6f0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
77d46e3e2bdd2a0749faf8c66867dc68

SHA1
65c3537ecbd2a99a1d1e43623860a66b70d23cd1

SHA256
9be1c04d21a5871d35111789fe5ca0b5a68dff81e383e121c92c9fa85886e06b

SHA512
aabd8f234cafea34716bc7aa1d3abbfaaa514281f8cc534c0403fd75733d82a390ec920a1f233b77be8d19c60a73e28ee422d8fd4ea084a451c8e8ea1d1c9436

Download Submit