50721276a65393428971dad07c4a7508828740314fbf0872b38f95e77ead7b91 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01-01-2024 09:54

Sharing

Report Analysis Logs

General

Target

3c8bd4cab473daa18655bb102788bbe8.pdf
Size

35KB
MD5

3c8bd4cab473daa18655bb102788bbe8
SHA1

be99615f7f535124998b8d574d7a4f936572268f
SHA256

50721276a65393428971dad07c4a7508828740314fbf0872b38f95e77ead7b91
SHA512

f7976c7cf28abc655892e4fdb29d0451fff4605cf7dd1b1c8ef4f4317dfb1270a7ae17b456a1cb6bfe7fb1ed04d98e4b47d5eea34e7f62045e80ba8817ae37a3
SSDEEP

768:nRAu1H8nlV/vsJiZm2pOVtV+4juHXV0Nd8UIXvgnL:ikqlozV+4jsRInL

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1672	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1672	AcroRd32.exe
1672	AcroRd32.exe
1672	AcroRd32.exe
1672	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3c8bd4cab473daa18655bb102788bbe8.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads