26361aaee35dbda60d980f5eb5cbbb3977a1ed8cf251f5a99a4cf9b175556dbe | Triage

Analysis

max time kernel
187s
max time network
127s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
10-10-2023 23:02

Sharing

Report Analysis Logs

General

Target

Customer-Support-Contacts-Brochure.pdf
Size

127KB
MD5

dbadd7701f81d05a9b153dbc16c8966f
SHA1

a651ef7c21528ad1922c4e14b3f518422a7e2cc7
SHA256

26361aaee35dbda60d980f5eb5cbbb3977a1ed8cf251f5a99a4cf9b175556dbe
SHA512

8865b8b7f2133d9290c78154531aab310cb31a58ed0eeb1bc1ef2de6338909678d2100231df038ffaab14d31fcc45bf358dff4e43fd3ad1cbc2c5b15fc5eb419
SSDEEP

3072:ww5WSBRIuM5YXeFHYdaDbEpqLUzudqY06Df:F5ZIuxXeF4d53N6Df

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2604 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2604 AcroRd32.exe
2604 AcroRd32.exe
2604 AcroRd32.exe
2604 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Customer-Support-Contacts-Brochure.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
47be479f2145502260ad3197fd46b281

SHA1
57e4d48cb0686751d99c36cbebeafc52627b3985

SHA256
509b9b8232a84f58c7b43345f7f6f034c0fc7fa3d105239eb77efce5eec143fb

SHA512
c0f9a07ad0d522fe460032d80e1da533a0b8fd508010d00084fd301b282741cda8c62bbb2dc0a1bef8a410208c5d1176b2dde6d2d8cf3fd8219007dc18c173cf

Download Submit