15815e7dc2011020d1f6d1ffb904257c6404aebb5d6c3000d405f18a01833387 | Triage

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12-03-2024 15:20

Sharing

Report Analysis Logs

General

Target

c3b0d1d12c198d39e4a4d4396d593a32.pdf
Size

34KB
MD5

c3b0d1d12c198d39e4a4d4396d593a32
SHA1

d5523d59c2dd58d367d6495612693f00f1cc1bab
SHA256

15815e7dc2011020d1f6d1ffb904257c6404aebb5d6c3000d405f18a01833387
SHA512

e6c76837de4b8e1fd06a2ce84cd00f3ac5688c5367b34ce7fbe469bdd009af9f5e51592b233e5b0ce70f34bbb4c7b7d640dc73dbcf4f363def6e6c5da82b5038
SSDEEP

768:rkjkPVbosIsiXSJVk1ppobiXWR8LMf2iRKqI:r2JsiXSJApFWRwMf5KqI

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2692	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2692	AcroRd32.exe
2692	AcroRd32.exe
2692	AcroRd32.exe
2692	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c3b0d1d12c198d39e4a4d4396d593a32.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1364376b6dfba0cd605c0995aeccb14c

SHA1
563c6e32f11691739b1ace322ef173b19cba5604

SHA256
5bd09953c1aedb288c09a30649ba0d7bf99b7d831e955c28db84c743590a7c58

SHA512
59ad1b93def750e767d66d387c508bd8616d6b9467f37ac468720f1bb2ecdce49a3787a745e2f90239e8a8e2adcc37f100067b9b639f7ff544096d905084ba3c

Download Submit