48cdb2496bda1693a77544bda5e7c8e60f0e6ee4ba46f05fcb0a152ad460667f | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 03:00

Sharing

Report Analysis Logs

General

Target

0c5a4f5c33d92ccc21859ba335b01d7b.pdf
Size

76KB
MD5

0c5a4f5c33d92ccc21859ba335b01d7b
SHA1

2993e23d3a6b0b34cd3655899124ee4dcb97fd3c
SHA256

48cdb2496bda1693a77544bda5e7c8e60f0e6ee4ba46f05fcb0a152ad460667f
SHA512

b12268b09b57e19fd539ba50dec9448fd60189c7988159c408f02d7b695256b24fee3c500dffac3427c5ae42d133f861ff64e0d13f04dd57f9f7fca60bcb4c86
SSDEEP

1536:4sYqexsXE7dqrGAVp8ETipbttsRMrQxBjPJzzM:4qMeE5qrGAVGET0rkBd0

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2140	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2140	AcroRd32.exe
2140	AcroRd32.exe
2140	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c5a4f5c33d92ccc21859ba335b01d7b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5c57f6f0353ce293c2421f312514ceb6

SHA1
ea2cfdc6118735accb4f8b07fdf0d4fa90a6d0a6

SHA256
6f97eb37333699ab8d7361ce4cc6d14348d85add05c699d11d35146143833936

SHA512
6ee7373f75d4cd0e30802666dc5e1da5604458b3ffebad5e02e7abcc0146197fe0e579112ceac3561bc375487376643a4e114c5d20585c5522200e2d05a1e4d7

Download Submit