70df875d5305464cb59cf7b197f9a8e6e72697e5ead6543b71bf1a2e1d78421f | Triage

Analysis

max time kernel
149s
max time network
126s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
05-08-2023 05:46

Sharing

Report Analysis Logs

General

Target

SBS-5.pdf
Size

1.6MB
MD5

e27034f8cd2af2660e274cf01c0c4afe
SHA1

5c47f364d35c0d8ed343d7266dd74d2680c2c53f
SHA256

25e5ab83a10efe822e2d0d68c6258528fbf9aa4b532b1f465e04f633df79869d
SHA512

cd2fb8d49080325e2213f4216b2c613d9d8ad9ffd5d1adb569ec1bd097126a17a20531890b8fb341fdb65471c42c31ae19e867caea9d2e7e3f1ceebc30013671
SSDEEP

49152:qbH8t16YEiicEMIUA3Xz0+Oh/K++Nb8tWMhUs9:qbHjYEiiZMTAnzPOI9Nb8tvx9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2260	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2260	AcroRd32.exe
2260	AcroRd32.exe
2260	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\SBS-5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2260

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d2d2578674ffab865100d1f3fe308455

SHA1
69da5d22433f625c36b724f72b07b40cd37de2af

SHA256
9f879ca468293e9bae8ee3037ffd4c5a0c3db23dbd0da599f5a7eac4b957513e

SHA512
4ec7e035605f5f1eba23de84f82bcc2d228e152655c393867e1c176bc245cba5946f2cc9ad7877871ee231a20af1bcde9cf5a14aa02c17a2368f9c4bdfb96160

Download Submit