8915ef221460b28863a47462d1a7850da9f34e5e5be299e3655f424b1db9c1bf | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 01:22

Sharing

Report Analysis Logs

General

Target

48f5d12b990ac2a02fd684cc66647645.pdf
Size

109KB
MD5

48f5d12b990ac2a02fd684cc66647645
SHA1

be971a1fff5cba1f53e13fe99547e716e3c0a3f6
SHA256

8915ef221460b28863a47462d1a7850da9f34e5e5be299e3655f424b1db9c1bf
SHA512

32aca795a360be9acad436769467d65aea2da85d9bb545df0eca368fd956e6882fc13e79f29794d257e457f886447a04eb3e319b98fff0d424a1b42a79209c21
SSDEEP

3072:xjtz2EyZ4AGCn+BwcHKmpEBxv+UG5bNvK0VO:WbK/Kmpmd8XQ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2944	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2944	AcroRd32.exe
2944	AcroRd32.exe
2944	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\48f5d12b990ac2a02fd684cc66647645.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
eced831ed821b94bf22a304e44d84b10

SHA1
3ff8d2ebb8532c275989d8b8891b382992cf706c

SHA256
591ff13f4ef3ff31315900ae8bcf637b7efebce370f2f79b1f3e8492499953eb

SHA512
bfa72f903fb815214e94ddcf107c565e85d89c9290ff4093b1db0bc690b742100f75d3305998d67382199d3e8e56fc481da754eec429e5becd490a82e7bbc041

Download Submit