49f35ea39adcb180f410e647c3e772b616c14d5cfb9908c0d54d96a40eb04033 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 14:29

Sharing

Report Analysis Logs

General

Target

39dd1efbedf97cfd4cdcd92343834733.pdf
Size

72KB
MD5

39dd1efbedf97cfd4cdcd92343834733
SHA1

db9865da3bca649d5165cbbc8c55c1f1a33d6588
SHA256

49f35ea39adcb180f410e647c3e772b616c14d5cfb9908c0d54d96a40eb04033
SHA512

425f03ddf199c211df88bace99cec490db4d811869e8476956c8eede947f2ef22103b2a64b7d413412f034365581a4524a0c4099efe0f233b2c8cc908a802fd9
SSDEEP

1536:1pHXiU4QgpAhMEPKL//Kd+reJhDHkAuKgKcy:PyU4MPKDKAklxu9k

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1428	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1428	AcroRd32.exe
1428	AcroRd32.exe
1428	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\39dd1efbedf97cfd4cdcd92343834733.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1428

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
3b0397d91145b3a7d369d1688958ee2b

SHA1
b6e1dc2417ec47befe4ff4904d85eccd1fb9260e

SHA256
70cd371f981b4c34a28ac4396d901ee27cb6560b284488524a82a487bcb54904

SHA512
129fd12637d449d035aba02e78cf2873790f95c2f450e07addbcb3c09b4a7a31f20929fcb9080e86d9353681a0f3bbfb8a180bcdf61831181a86a38b4cdb2333

Download Submit