70459f1f04e300cef53630d24d850815894c8d6b86d6aa3361ec065dd88a1c99 | Triage

Analysis

max time kernel
152s
max time network
126s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
07-10-2023 11:41

Sharing

Report Analysis Logs

General

Target

tespdf.pdf
Size

34KB
MD5

2596dd44644495858a1618d2fdce00ca
SHA1

60b016070655b2bb0e7f25d877fc72187c1a6d83
SHA256

70459f1f04e300cef53630d24d850815894c8d6b86d6aa3361ec065dd88a1c99
SHA512

4cfddd6eef2a75d021e66fdaddb731624e020c7d3f5b7d2d425e9d8075865f8589cd4188024ac3a031880b5c8e173102b6da47eb1230acd4b0113256ecf09b88
SSDEEP

768:yDIlGX0TG630H30AUdXyD7yOzKODjV3qSvRvXP7ZhznxjIw+D+cy:RHhZJyD7yOb5hpvXP7zxnv1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1368	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1368	AcroRd32.exe
1368	AcroRd32.exe
1368	AcroRd32.exe
1368	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\tespdf.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
da68c87a70768df365bb89733f657314

SHA1
3255616196118b9b9ce6ee80d99d3d55de28904f

SHA256
b18893532d84dfc97c7f5ccb78b121dba47817bf5703a4fe6a456fea841c0b92

SHA512
cab2af99c054bd61bea38396937663c9702f0c18522946b087100976938f6c8c2b10aa5293515a40bd06b1f5d4f7bb7b40319aa592812ba6c0d222cc7ff203f4

Download Submit