0ace1571a027b87f53c9774c83f77b10bd7a747466367e519e49590849429041 | Triage

Analysis

max time kernel
150s
max time network
121s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
21/08/2023, 11:31

Sharing

Report Analysis Logs

General

Target

Invoice_4532.pdf
Size

398KB
MD5

857ff269a3253a9f0a7944e13a636e14
SHA1

3ab9a5fc1464066963f3570ee7b03bc3320de940
SHA256

263dd64e9f5c81d3688cb3788d80a0f7b8ec6f92c728069f34b2349e2ffa3c11
SHA512

33e61854dc09f8046754585a14934a38a8096802e7b0c11bfcd17870354fb0639717fc470ac17c1b006148122f295ae96219acfab50185ef6e246cbcab094ddf
SSDEEP

12288:feJrkvO0nDZ7HnicDmDgfYe42quSkMPUyZ:W2vzDZ7CTDAYeQuSk8UyZ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1964	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1964	AcroRd32.exe
1964	AcroRd32.exe
1964	AcroRd32.exe
1964	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Invoice_4532.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
310d8982ecb96129b9bd5aabec7f7d2c

SHA1
7290aa36360d7f257c9f9e02cfec69313bd6c911

SHA256
b86da2785aa0af9c26633adfa8ac08074af7f61c640d585095bd5befe8583a2d

SHA512
6c332295be8b4ace7aa391fe8b20340cdca761f133a205a2ff9c5d627a251aa141c1e9de4fb2cf5c767f8e20c33a08f2a1d719a69cc10da8d688d6123f45050d

Download Submit