a6bea62303c10139ebe3abbbdbc21d109c7493ad8afa44b3c7a2946ec7c38332 | Triage

Analysis

max time kernel
120s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01-01-2024 20:58

Sharing

Report Analysis Logs

General

Target

3ddeae17d0b5ea17007f6c913863258a.pdf
Size

52KB
MD5

3ddeae17d0b5ea17007f6c913863258a
SHA1

6af1f39c0870fc65658392d6de2dd523dc2996b5
SHA256

a6bea62303c10139ebe3abbbdbc21d109c7493ad8afa44b3c7a2946ec7c38332
SHA512

426e048a0fa552039a963fef788db6d2b29de98ea84150361a6e4e887a931db60e608d2fdd5b9dfd71b4ed7554434b453c7540e54bd1a1e087bf222c2e2502b2
SSDEEP

1536:771nlOlrQlbuX7kxtYS9+R3VbOM/6Nn0BFk:77dlEclbuXIxnM3VbOMyN+k

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2832	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2832	AcroRd32.exe
2832	AcroRd32.exe
2832	AcroRd32.exe
2832	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ddeae17d0b5ea17007f6c913863258a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads