5ba2468a53dd4238da537529a02675cbe212694032732df93e0ffd0b852dcad2 | Triage

Resubmissions

21/09/2023, 13:23

230921-qm4mnaab76 1

21/09/2023, 13:20

230921-qljabsgb9t 4

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
21/09/2023, 13:20

Sharing

Report Analysis Logs

General

Target

ΓΕΝΙΚΗ ΔΙΕΥΘΥΝΣΗ ΔΙΚΑΣΤΙΚΗΣ.pdf
Size

436KB
MD5

fc2516ff9238f1474e2c827addf0ae40
SHA1

67ceaf1e4403126166f3d3b61e401444707a768c
SHA256

5ba2468a53dd4238da537529a02675cbe212694032732df93e0ffd0b852dcad2
SHA512

fdd8cd7c49ba13fde35c95bea81e3d24e31d9cc275a9f92116ee9078b83072deb42297e3d8bcad40e541be8511245b3dc0f37c5040ffa3a31bec206b97b5dae5
SSDEEP

12288:rngHUxiIQfoz+QQL54f0CEiK8SJlmOoGa0X4i:KUxeX54fWxJ4Ow0x

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2044	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2044	AcroRd32.exe
2044	AcroRd32.exe
2044	AcroRd32.exe
2044	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ΓΕΝΙΚΗ ΔΙΕΥΘΥΝΣΗ ΔΙΚΑΣΤΙΚΗΣ.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
015205b56dc9a313b44fb37bb0d9f278

SHA1
b1413c80c95f9c42f5e08972263b1b388ef0fd5b

SHA256
6724351471df13ea5df7397bd53a9f176f3d835b5439f720c2d7f627e6556581

SHA512
65e1d88de7a914c2a108a30c78c342c4a4ed38c549ec3c415ff98bb6dce9c8a09d9a023bee82a78ae2d89a54412ace06a4138c4d80025a2543e65a9abd790fa8

Download Submit