5a60f2846f13ec0c0654a817ad1f417729501ca10b5cbd2ef8c4a9875e470001 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
03/01/2024, 14:43

Sharing

Report Analysis Logs

General

Target

3ecf8ce80778852a625222f96f915628.pdf
Size

35KB
MD5

3ecf8ce80778852a625222f96f915628
SHA1

69cbe66cce95d1177c336409c4c7a599b502c9d3
SHA256

5a60f2846f13ec0c0654a817ad1f417729501ca10b5cbd2ef8c4a9875e470001
SHA512

f5657bb38db5f7ce2645d4c7286de2aa69a97234be4f2c92507c47c6144de152c528a28fef7c5e0627c527c7dc29ecf3365785eec1c805d3a31385f5ed1b21d0
SSDEEP

768:gAI7+RpcGs+tHr87taYicgBBBSu3am5aQN:GqDcGw7tamyd7ac

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3028	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3028	AcroRd32.exe
3028	AcroRd32.exe
3028	AcroRd32.exe
3028	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ecf8ce80778852a625222f96f915628.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
62a009a552ac063ff48fe4d6926431c1

SHA1
0540743a7e21e9a419b3250e887f2c5ef6d8ed2c

SHA256
83d967caca69427cb22bd01d123fd82b749713211ab9823db541946818efb7c6

SHA512
ce08ea957ee396037d26e8c1a77352d2749f1b5b0b882b6034022369ab1093c61f6ea9c51f684dfc22b49d35e93b7cc894afcfcfb11f1fbfc0a2ca93c4480247

Download Submit