24551c4146510be7f4e29222aed093c449a5b6a62370f9a5c5423656c124aff9 | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 01:17

Sharing

Report Analysis Logs

General

Target

48a0930cc04762d9dae8f7dda1fe1c79.pdf
Size

72KB
MD5

48a0930cc04762d9dae8f7dda1fe1c79
SHA1

99d87d28e7df9e342229ec74c4876ca64ec1d910
SHA256

24551c4146510be7f4e29222aed093c449a5b6a62370f9a5c5423656c124aff9
SHA512

d8d9e80d0d49ac2876ad1acc62f90a26f5e2beb462b4e60b1f5616b557efe65e2e2f7ba8f4c43a2e029ac329afb5e76d9050ce07a1dea20aa4b5d61fc8004c00
SSDEEP

1536:JweL9Gra3C8lAf1F1rMG66uzcq/m/gPcI6:NLwra3C/1LuzlmUcT

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2204	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2204	AcroRd32.exe
2204	AcroRd32.exe
2204	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\48a0930cc04762d9dae8f7dda1fe1c79.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5a49d70b16cdb00741922a049a835f56

SHA1
cce1bba06f58b35fc1cece4b29bdb10f1f0da46d

SHA256
8032adaf657d85da2f4b3fe7225ea9d75f21134e7b420c2550002d5d338fa1ee

SHA512
738e176d55c8a68e3203038e2c4ac330abe377d7724d9291dd173448313f962dc55786e17007d2d30d0a7870085cf1b5364b3b0a5b9b7c01ec7f41eb4d2b8108

Download Submit