bed358c0fc055899a6ebe55b0599be47cacd1051b37764d211f0a421358b11bf | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
03/01/2024, 21:13

Sharing

Report Analysis Logs

General

Target

3ed65e55a4c6cd5ebfb28ea339a6af72.pdf
Size

30KB
MD5

3ed65e55a4c6cd5ebfb28ea339a6af72
SHA1

3752e982aa92c448fec269f71a6a1e77fb045cba
SHA256

bed358c0fc055899a6ebe55b0599be47cacd1051b37764d211f0a421358b11bf
SHA512

17998111891fe921a2af40a563cef45acf997308dfd0c28e5914e69fc3dcbda34dbdeb91a19cff8eb2c36cd1895e9d455713938bf8480bc52ae9d8db47d65757
SSDEEP

768:jgGzpDLebnAJWx0TIu2MS2uX6JGV2bj43DLKexpH:cGF/euWN2G2v4qexpH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1268	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1268	AcroRd32.exe
1268	AcroRd32.exe
1268	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ed65e55a4c6cd5ebfb28ea339a6af72.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b90c8f17cc469584e420edcb9a68528e

SHA1
99d85705bd3b7f7107572fbe47ae485e8f1c7d5c

SHA256
81a04afe96e070d82537472b5ff70e761bfa2f524a38517b644dbe379d6acd39

SHA512
8fd4e6472a53f60bfd1bcf1e27164d604f28f7206eff3013898354902c054a7d5caed065f4e876ade10181518e8ce5a0aee9616e3b038c3e747724305c2e3c00

Download Submit