70459f1f04e300cef53630d24d850815894c8d6b86d6aa3361ec065dd88a1c99 | Triage

Analysis

max time kernel
150s
max time network
125s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
02/10/2023, 10:48

Sharing

Report Analysis Logs

General

Target

tespdf.pdf
Size

34KB
MD5

2596dd44644495858a1618d2fdce00ca
SHA1

60b016070655b2bb0e7f25d877fc72187c1a6d83
SHA256

70459f1f04e300cef53630d24d850815894c8d6b86d6aa3361ec065dd88a1c99
SHA512

4cfddd6eef2a75d021e66fdaddb731624e020c7d3f5b7d2d425e9d8075865f8589cd4188024ac3a031880b5c8e173102b6da47eb1230acd4b0113256ecf09b88
SSDEEP

768:yDIlGX0TG630H30AUdXyD7yOzKODjV3qSvRvXP7ZhznxjIw+D+cy:RHhZJyD7yOb5hpvXP7zxnv1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2576	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2576	AcroRd32.exe
2576	AcroRd32.exe
2576	AcroRd32.exe
2576	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\tespdf.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7d1128ed8c4fa45a80257dd3bf4c1c91

SHA1
57c25739cf33473890303bcf910888631f6df349

SHA256
e1f0668be0a4da510f59606eed90e968b4a3c6ab20109917be952d37f4829fbc

SHA512
4f38c8d867ec76dea5ba38bc227c8d8614fe6ba921051555e458f6f40da60f35520d2483804a3a9fbb6890a171c71cb58054d64fcb070562ce19a1d96c66d485

Download Submit