47c0bb3bc72a6166c3534dcbba34d49744e087aab79fda17d0db72388b272d14 | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
07/01/2024, 03:17

Sharing

Report Analysis Logs

General

Target

47e1a0c27e39701fd9b22cbec3b1ac8d.pdf
Size

48KB
MD5

47e1a0c27e39701fd9b22cbec3b1ac8d
SHA1

d1766db287699d960344af636d9733bcea1d6472
SHA256

47c0bb3bc72a6166c3534dcbba34d49744e087aab79fda17d0db72388b272d14
SHA512

043b0bb469bfe4f8e8c3fb0d191a8f5f51c1fa9b2002de536ce85ab6d41a713cef75a212bc1ca4a796fa7588e8e9b3dc887d89c7ac25a30f80225d8192eafbfe
SSDEEP

1536:QUc/EOlm6nU+YK3fB0ZjgwfWFe4BU5cHf:QR/Fm1+YK3fB0ZjgwfApBBHf

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2208	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2208	AcroRd32.exe
2208	AcroRd32.exe
2208	AcroRd32.exe
2208	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\47e1a0c27e39701fd9b22cbec3b1ac8d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6f7cd3e5746d2341d6fed00f92fe361b

SHA1
50e8a283c6498ea9e8cdd47dbc800aef7e88465e

SHA256
e0c9163884fd6b6aca7ac9b0fb132b06f48797837d3696c45520307f8c52d4bc

SHA512
d56f28bd274de0470375fa7a55caa171fa21f9571eea1425c767010d1f2be2d2a857f312ea1445f41e39da3e89b097dd3ce62f08f7e9561ac1d2cc412706298d

Download Submit