5b827cedc72552dfdf519107586e47997d7348dd9d075888ae1674c46983e941 | Triage

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
31/08/2023, 20:55

Sharing

Report Analysis Logs

General

Target

comp_baix_39125609 (1).pdf
Size

29KB
MD5

281d3d7ecf5943d08de9fe3a51da6f2d
SHA1

22e03c3326f0afa85c63409e98bd58fd801fdc6b
SHA256

5b827cedc72552dfdf519107586e47997d7348dd9d075888ae1674c46983e941
SHA512

23c7519a09921a30edd7e445c3d9edcac637f7eb730a95d119d9a449147ad01b5fc4f7a28eb7aa4eea6c23eec3a7982005c55e129a9f5ba1de60a6b00dab2b3a
SSDEEP

768:TkqzBPoFuf3y4w4GE9tShMPDmXHfXRsLZHmUM6/f/ZEXC:TjBRa4MESaPDmvhs88SS

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2316	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2316	AcroRd32.exe
2316	AcroRd32.exe
2316	AcroRd32.exe
2316	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\comp_baix_39125609 (1).pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2ec934ce36a3fde1d4acb273f595f8bc

SHA1
177e6182780ffe32e87fe0aa008178007c8732a3

SHA256
17b4418ac23ab970e9dc263e9cb36b2daeaa4a0c69541cc0455389f6e977c53d

SHA512
d1a8fe3b8c9e68a88bc73e377ea2058292a1dd354fdd3c9a247b5dd2db86df11cf464152e24cf37a2cac83af53671ef9199c86e3030a96be2ae0d30814ff9ac1

Download Submit