b3e1d77a999365a129e5509c33a64aadb5641a79d0649890f71c347a0584f3d9 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
14/03/2024, 03:20

Sharing

Report Analysis Logs

General

Target

c78d1483971b0648473ed2924be3fcb1.pdf
Size

101KB
MD5

c78d1483971b0648473ed2924be3fcb1
SHA1

941a0f5170b604716d3ff92e4fb269b46f218d2c
SHA256

b3e1d77a999365a129e5509c33a64aadb5641a79d0649890f71c347a0584f3d9
SHA512

845077303632385c8ee0ff9acc4821a0c851e051cb42fb5695abb5382f5cd545d88ff2494755e511500e9af2302835c32d9252b8c4095d957ce44b7462e0422e
SSDEEP

3072:Uo7peH+24YE2tHgOKC+KVLb9czUraZ/hj:HXYAhC+KVLu5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2380	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2380	AcroRd32.exe
2380	AcroRd32.exe
2380	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c78d1483971b0648473ed2924be3fcb1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d04d36138d03fa10603888661dcee780

SHA1
d380bacb15022e3055134149612e6bd1ee1c45ac

SHA256
5a0dd889c619bf1a53066a47e0cd2dd61b4c0a798fa26b312f0e6e090bdaa8e2

SHA512
7c9fb49554fd49e632900d715664615357a681c490f2a95731b1c6dd72598d85569c13b448db9aa223fe2f81151f745115e6436c86112061a060093cdf5134b5

Download Submit