d96bd7bdb83932a81c02ceb4aff61ae804a542b40f45ec5fe3d0ad2c8492d4fe | Triage

Analysis

max time kernel
150s
max time network
122s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
18/07/2023, 16:43

Sharing

Report Analysis Logs

General

Target

Invoice_details.pdf
Size

34KB
MD5

82b700b321f4a07c0c0d4a7c368b2bab
SHA1

44025232b042dc222963f319f49aa643c221d3af
SHA256

d96bd7bdb83932a81c02ceb4aff61ae804a542b40f45ec5fe3d0ad2c8492d4fe
SHA512

ec58faca31a107981e4c343ea13b301ec1f124d8f9b156cdf9c7143c77ac6586697eb0c13981aa4db395b1259cba77a8a88c10c2a7e8add207c7f405d73d85b7
SSDEEP

768:yjIReeOSxVaD/oc3onoO8fVGLisOwVcN6imgSCmedGQQXDllTj:gfVGLiJX4imgSCmSi5N

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1780	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1780	AcroRd32.exe
1780	AcroRd32.exe
1780	AcroRd32.exe
1780	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Invoice_details.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c0058bd618147434a72f0f7b56079975

SHA1
980393f0ecf1cb88c989ec411ecd001e0efc38b4

SHA256
51324e13727172175df26ddc2e9493b505e404359f66f71e3c968f11fab8452e

SHA512
ccc7ab9597514c4c27cdfe70cf3d539c306952c20c8d12223feb19384460ba2faf6b9da92da1345153b550848c70629d8613425d2a47a6a3fc1df7c779d3e69c

Download Submit