5dbadd08b1faf8f1f635a4dd4fb8d276009259b27a5debd0cac5a0ea6b0f6302 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18-03-2024 14:06

Sharing

Report Analysis Logs

General

Target

d3b2cc204d742b6bc173462852536e14.pdf
Size

109KB
MD5

d3b2cc204d742b6bc173462852536e14
SHA1

3aec0bc05ba7d88d6e97b33bc851cce60ceef5cf
SHA256

5dbadd08b1faf8f1f635a4dd4fb8d276009259b27a5debd0cac5a0ea6b0f6302
SHA512

6dd08acee41e32374355f16b1be3c8d2f2208e4c9c7c176a99969c711252707f0403923a914f90b47a0a7ca798cc1d651d8b050dc0ff58ba358350f28a4be5b8
SSDEEP

3072:NO1/nI8QkRvtsq1xqT3k0dI0kZwrQNKnhGAC:6nhRu3nI0I

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3048	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3048	AcroRd32.exe
3048	AcroRd32.exe
3048	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d3b2cc204d742b6bc173462852536e14.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
39dd5d6e75fac461ea4acfd4b3a8d00e

SHA1
d5aef1ac43298b3a2e5029a9e5ed5231673b2c74

SHA256
08500ffa5c3c0388f493379cda469853b0eed36e941859dbf3b14090888f4b1b

SHA512
9eeb43b400848ecefc6923efcadf20e99c601aaacfae824b3e38f757b97ee97b99600117222c68ba8d59622b1d29434faf64a51e4515e8b2a28883f5504eb9bc

Download Submit