3bad31858404bb734b6fdfe4ccad2da9cee2dfdccf1d1b39cda6202dbbad7e00 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14-03-2024 14:34

Sharing

Report Analysis Logs

General

Target

c8db74b4af52368cb6b415f68ab5c7d1.pdf
Size

97KB
MD5

c8db74b4af52368cb6b415f68ab5c7d1
SHA1

f5ac5e2713f00b004e1f0d721b5320cac9993dfd
SHA256

3bad31858404bb734b6fdfe4ccad2da9cee2dfdccf1d1b39cda6202dbbad7e00
SHA512

ebcb484df8102d909d1baaef5da4dac81f77fdc259052d465b0e9c1345470afc7188c117fb86bfa557ef4fa295ab472723b20e9e6f0632c2a23f071e28cebbe2
SSDEEP

3072:wFzydaYCyREUkQfxhKWhPPzPPywqBAu2V9y:ZaYVRL7K+PPzP6oo

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2856	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2856	AcroRd32.exe
2856	AcroRd32.exe
2856	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c8db74b4af52368cb6b415f68ab5c7d1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
396ecb3256a30d8bee9cdd234830ee5f

SHA1
6776a19ca13fb78c34a5986d43b19dd01a34beac

SHA256
01417371fc9cd441eec05f300e1d20d54497ba31fa24f0657c04a1712e5f3527

SHA512
ab9c9916cf1af5933714a8c785ea663c3db222f9d3872ef60c50bd3f8f7fcc59d19e5fb51913dfcef2563e423434ae8fc034848e1d97aee506b9850c58e3c2a9

Download Submit