70459f1f04e300cef53630d24d850815894c8d6b86d6aa3361ec065dd88a1c99 | Triage

Analysis

max time kernel
150s
max time network
122s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
04/10/2023, 07:46

Sharing

Report Analysis Logs

General

Target

tespdf.pdf
Size

34KB
MD5

2596dd44644495858a1618d2fdce00ca
SHA1

60b016070655b2bb0e7f25d877fc72187c1a6d83
SHA256

70459f1f04e300cef53630d24d850815894c8d6b86d6aa3361ec065dd88a1c99
SHA512

4cfddd6eef2a75d021e66fdaddb731624e020c7d3f5b7d2d425e9d8075865f8589cd4188024ac3a031880b5c8e173102b6da47eb1230acd4b0113256ecf09b88
SSDEEP

768:yDIlGX0TG630H30AUdXyD7yOzKODjV3qSvRvXP7ZhznxjIw+D+cy:RHhZJyD7yOb5hpvXP7zxnv1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2340	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2340	AcroRd32.exe
2340	AcroRd32.exe
2340	AcroRd32.exe
2340	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\tespdf.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f3179009dad2bcc35a8e5daad6b6d539

SHA1
19ecb43a24379a449a529ae2a2e5c2bb476eb67c

SHA256
c54d0656920e2ddb667aaabeb7f49ee0465fb214adf3dbbbb1ec789a46a40124

SHA512
68dd89efdaea132796e2c0100fe9d5ae7ff109dcbcf804f947e2df4efe0105cd65f826b6bef637035b8a09b677e9f9b6298dc78b75477d3585fc9ebe80ec3777

Download Submit