7e31e02c21d00954d48841f766fce9f625230ee9e2ba918d010d2e3fad57c07e | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
03/01/2024, 14:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3ecfddfc04095fc654b627d65c2aa66d.pdf
Size

30KB
MD5

3ecfddfc04095fc654b627d65c2aa66d
SHA1

6bdf3f90adb3cc28e1c96828de477d0ad9a5e8ac
SHA256

7e31e02c21d00954d48841f766fce9f625230ee9e2ba918d010d2e3fad57c07e
SHA512

d39f463ff2447a8e76c84ad1c330050cc5f3257d9fac79cf82252bd3adb9b8101481542b60029bb75cf672757ff313054855756dadfd80806e1d1a4aa22ff48e
SSDEEP

768:Qy47M8x5r0WzA5I9j33jbVfKGE6VrzsO23L5K:09oq9jjByGE6VrzsO2dK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1104	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1104	AcroRd32.exe
1104	AcroRd32.exe
1104	AcroRd32.exe
1104	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ecfddfc04095fc654b627d65c2aa66d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
501f9451655381b73327c795d57d86b1

SHA1
e41d4df0a69d86f4cfdbd78cc49ca5fe179af3f4

SHA256
7d6eb03bb5435807aebbb01a4a4abaa2f7288216486a72d5630b9652227390d7

SHA512
6d9cf99713f6cbdcf1cac11e5cfa586bf5b53701e381ec99ea709f4a3eb502f802048be90804981d1925f8f7dc562595de6363ed8525f7265788fad27950515f

Download Submit