3e850f02cd4ff0de189c7440ae5b9adcb1d8239e695e800a73efab7ba90f2634 | Triage

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/03/2024, 13:08

Sharing

Report Analysis Logs

General

Target

c0aa8998de2442324863a5330860ebd3.pdf
Size

33KB
MD5

c0aa8998de2442324863a5330860ebd3
SHA1

310ba760c8e6cb96cc6c8b225e79369ac5f2cadd
SHA256

3e850f02cd4ff0de189c7440ae5b9adcb1d8239e695e800a73efab7ba90f2634
SHA512

64b1e3f72dd3a59abeb39fcd98faf423e91ad015c7fd70103fd5bfb4cf14c71290e16b40233e8dc0dea8a1fa7c8de42fa6ff17cd4149dc1a6f79c62eaedb1355
SSDEEP

768:Nuq0zlA8zg7BUJouCt5dlPpr4L3xEg2FsPKJkx8A:UTu8zg7BGho4jxEg2FDSx8A

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2968	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2968	AcroRd32.exe
2968	AcroRd32.exe
2968	AcroRd32.exe
2968	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c0aa8998de2442324863a5330860ebd3.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2db7730a7c59768fb6c7b95d307631c5

SHA1
2e50b965f3ec24a0e9233df3c2e4e2081a7db121

SHA256
05951f95c81e1f416084ec9ce7a757d43151de0fa2df6e11186d71b1c4922c5c

SHA512
824a87bacfca7561e88f64cfc3191fc2954ac031d80a7735ddd518312bc4c6afcf1c4824e89515aac7f01e409fff50f33fe5abfaa41fc0a1983b6d654dba468d

Download Submit