c9f28d39c47742fa8169471f08128e004a57ab3e90e4a5ee525fa29e42085c62 | Triage

Analysis

max time kernel
150s
max time network
126s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
18/07/2023, 21:11

Sharing

Report Analysis Logs

General

Target

SBS-5.pdf
Size

1.6MB
MD5

e27034f8cd2af2660e274cf01c0c4afe
SHA1

5c47f364d35c0d8ed343d7266dd74d2680c2c53f
SHA256

25e5ab83a10efe822e2d0d68c6258528fbf9aa4b532b1f465e04f633df79869d
SHA512

cd2fb8d49080325e2213f4216b2c613d9d8ad9ffd5d1adb569ec1bd097126a17a20531890b8fb341fdb65471c42c31ae19e867caea9d2e7e3f1ceebc30013671
SSDEEP

49152:qbH8t16YEiicEMIUA3Xz0+Oh/K++Nb8tWMhUs9:qbHjYEiiZMTAnzPOI9Nb8tvx9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1136	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1136	AcroRd32.exe
1136	AcroRd32.exe
1136	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\SBS-5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
750ca0b6177b28e69e956d80ba7796be

SHA1
60c7b79791555276a07e096318d07ebb1c23fe54

SHA256
315515c888db654a45024dbfe33d9cf8aea1442024dece884aba14ca8da483c9

SHA512
6dd1e269e80c9b748e11a5b786aab23879b7c31cd360710efc2c486ffc270b54af0d3d10f93ccac905c9974aab34ae9fa6ad3d8eed1f6c07bc74fc124e0ce9c2

Download Submit