3a971d459274a1a44f3749fd8635fba68c31893b8df1a9fe702d34830a949ba1 | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
20/09/2023, 01:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

DB_aabgjfbaiddg0x0370.pdf
Size

254KB
MD5

e6e3f0458c6be0c4c1e08353fe217504
SHA1

73583d19a1983a39c65055e96acf9af58392b10b
SHA256

3a971d459274a1a44f3749fd8635fba68c31893b8df1a9fe702d34830a949ba1
SHA512

8e64094290fc75d0ad189a09547720a7d08050b62fe4f547208607d4db6325933224fa7bcdb16bd97d034677caf97e496b00d3d4f53c612ba58f111547fbe373
SSDEEP

6144:6T2Ow1HxoX2ZpUSpnxiLVgdWklISxXBCiVMPNBIw3Q:6qF1RpBAVk2S9YiCXpQ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1900	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1900	AcroRd32.exe
1900	AcroRd32.exe
1900	AcroRd32.exe
1900	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DB_aabgjfbaiddg0x0370.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f0eb71f3b97a79389d23f13da7e4fc17

SHA1
ed669b33c334f2ce1cea27a5eba719032a63028f

SHA256
0e3a14120e5a3ffe9d9dd6db28cd253663fb253658b7ac143e0d183bb50061e4

SHA512
262c90123f44b4ad0d14cca5fd38486122df1d7558f08a1bb8202ea1e92d0da6f6366bbae35766074fad9d486e44c23d7851c363545cf4482f02dfdd90582f20

Download Submit