bee4a5ca0721da2c178727be1dc558700c7bdd4da6afa2d1e6b85e1b0fd2d319 | Triage

Analysis

max time kernel
150s
max time network
35s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
10-07-2023 14:19

Sharing

Report Analysis Logs

General

Target

OTD-TOC.pdf
Size

314KB
MD5

e7b22414e7b5593814b815184a740d76
SHA1

b93a12e1901981596e65e92313c9d5030063e833
SHA256

bee4a5ca0721da2c178727be1dc558700c7bdd4da6afa2d1e6b85e1b0fd2d319
SHA512

693ab2d889a275b64bdfe108c912b23378b53088f1114bdf842c81ab7ff5237d424d4423d7d62f5549f7fdd5dcdea44fa5c54edf9075feda99db46ed2e29de60
SSDEEP

6144:Hwa1Rh1BGcS0cyAwQ6mX6wK2LLauhzzmbYJWkCVXHHkCMxej:/3GcStCQ6mKwKglxz+Y8kgXkOj

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1132	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1132	AcroRd32.exe
1132	AcroRd32.exe
1132	AcroRd32.exe
1132	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\OTD-TOC.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e67e4bbb70db70d60b1fb191c60b1be1

SHA1
146de1fc6defe1a7cd1ac0dc9616649177a24578

SHA256
c6d1b3d10ed7ed02ad2a1f9984119afb2f8435b2df377d9ee1f9993aad33f716

SHA512
cbdb7e07090c090128acc7bfd78f528735cde80e05292cc401e597f1d04f1126ba4e5c76c7f5a1a9e6970651ecbb0c40b7a7a14010563973328b1ea8e5aeab8c

Download Submit