53cb0d6fcea0691c567f874309df843df7d7386842a5443907825fc3ddeb235c | Triage

Resubmissions

13-07-2023 12:51

230713-p3j3hshf3s 1

13-07-2023 12:49

230713-p2qtnshf2w 1

13-07-2023 12:22

230713-pj2s8ahe5v 1

Analysis

max time kernel
150s
max time network
124s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
13-07-2023 12:51

Sharing

Report Analysis Logs

General

Target

bank_statement.pdf
Size

53KB
MD5

5d73628bbc55be7a97b165793ff89a29
SHA1

aa7a4f5623d7bf83ce017f34e1976781b4389d75
SHA256

53cb0d6fcea0691c567f874309df843df7d7386842a5443907825fc3ddeb235c
SHA512

df426280ab5994f524c6e699448186896a50d5fea846f90bd177e705092f0b6fa32407740fa6d1f1751d9e04147cfa79bb5e83a16e111a4b6a6cf3f12511e17d
SSDEEP

1536:mxsFbT3XQwUi/qznO9/s8KhhbIqt+8YAJXV35gIuOH4GB:4abT3XQwiznO9/5KhhbntIAJXVii

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

816 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

816 AcroRd32.exe
816 AcroRd32.exe
816 AcroRd32.exe
816 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bank_statement.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b81a4a6414eb24d0d209697bec09ac6a

SHA1
4f41c37e1a55e387b5111c8d79cb2401ea4a4d2f

SHA256
a8d9c7a46c868fc71a69bd3b7dc0cd5352a498d5663c03e3b3db3ff78f8ced93

SHA512
e282afcfda7f3ffe32d3f185ba757d0849b6d88b0e925e87b2d6e4aaa1b672ecb4578a0e99d43e657c7535baf64af98ac5a6f58b444aa99ab65574a75d6d4931

Download Submit