53cb0d6fcea0691c567f874309df843df7d7386842a5443907825fc3ddeb235c | Triage

Analysis

max time kernel
121s
max time network
34s
platform
windows7_x64
resource
win7-20230705-en
resource tags

arch:x64arch:x86image:win7-20230705-enlocale:en-usos:windows7-x64system
submitted
11-07-2023 18:09

Sharing

Report Analysis Logs

General

Target

bank_statement.pdf
Size

53KB
MD5

5d73628bbc55be7a97b165793ff89a29
SHA1

aa7a4f5623d7bf83ce017f34e1976781b4389d75
SHA256

53cb0d6fcea0691c567f874309df843df7d7386842a5443907825fc3ddeb235c
SHA512

df426280ab5994f524c6e699448186896a50d5fea846f90bd177e705092f0b6fa32407740fa6d1f1751d9e04147cfa79bb5e83a16e111a4b6a6cf3f12511e17d
SSDEEP

1536:mxsFbT3XQwUi/qznO9/s8KhhbIqt+8YAJXV35gIuOH4GB:4abT3XQwiznO9/5KhhbntIAJXVii

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2340 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2340 AcroRd32.exe
2340 AcroRd32.exe
2340 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bank_statement.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9aef3930b5a7aecc44ed805d242be268

SHA1
3997a86024e1ea14ea5066f24308e951bb8fc6a2

SHA256
a32ed7ce23a0d6a51251cb1abb58bd05dd1cabcb68648039b171b6ab9e0c06e1

SHA512
a96f3b87eb17cbd0c9ec747fe8b534ee88f465386d5fdb0d2298a1f95a2c4a04b6c39e81e057f03053b9d8ec3a8ce3166df638fe3181f2d450472f457ba9c794

Download Submit