9777bfba8aec841c3ae8f6a43a5386342f68a34c68bdb903e2113f08586d8450 | Triage

Analysis

max time kernel
165s
max time network
122s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
14/07/2023, 18:20

Sharing

Report Analysis Logs

General

Target

Informacion_AUTO-ASEGUATE.pdf
Size

273KB
MD5

50988c02dc0f8dc27e5a271389b800aa
SHA1

aa09567d9a19ca1134fc7f05695bfa964684d11e
SHA256

c2cf86bd60b8cc81c70f8c85372e65241c23f1cb1f5b16090c72cb3eaa85a526
SHA512

6fc13d53dbf2a35d96789259a8b73348813e99ff720e65c1241a5c33ada69eca75ea007760443739c8238e99abd8eeccd5ca529c831548e35d80e8355d844e1d
SSDEEP

6144:u/8Eva6S5BS4BwG/F0QqQ2xhMu6frqPJvaqy1ZzX:ozSBBw9Q/eL6frFr

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2804	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2804	AcroRd32.exe
2804	AcroRd32.exe
2804	AcroRd32.exe
2804	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Informacion_AUTO-ASEGUATE.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c3707ddab3fd7302efec288ce51839b3

SHA1
b65fcc011c49f933b696b35f0767c0c0189f5e75

SHA256
203f411f7b0a433a5f7acc80954178dbda6478506dfcef93983d65aced721401

SHA512
1a73ff7491bd8be5ffdd636a902c5d53bbf97e1f2133f8ef35dac54e18824a6025636ccfe5e92d72426f757cea5762e0827f75832f5edddda9638ea1fd77808a

Download Submit