26361aaee35dbda60d980f5eb5cbbb3977a1ed8cf251f5a99a4cf9b175556dbe | Triage

Analysis

max time kernel
150s
max time network
129s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11-10-2023 05:15

Sharing

Report Analysis Logs

General

Target

Customer-Support-Contacts-Brochure.pdf
Size

127KB
MD5

dbadd7701f81d05a9b153dbc16c8966f
SHA1

a651ef7c21528ad1922c4e14b3f518422a7e2cc7
SHA256

26361aaee35dbda60d980f5eb5cbbb3977a1ed8cf251f5a99a4cf9b175556dbe
SHA512

8865b8b7f2133d9290c78154531aab310cb31a58ed0eeb1bc1ef2de6338909678d2100231df038ffaab14d31fcc45bf358dff4e43fd3ad1cbc2c5b15fc5eb419
SSDEEP

3072:ww5WSBRIuM5YXeFHYdaDbEpqLUzudqY06Df:F5ZIuxXeF4d53N6Df

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2228 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2228 AcroRd32.exe
2228 AcroRd32.exe
2228 AcroRd32.exe
2228 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Customer-Support-Contacts-Brochure.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b769fd708f62c374a91efa5a335b7db4

SHA1
2c9e28d83bd1eecd0cc3fbe930441fb35acb6806

SHA256
ffb1d04daaebc2aa595db2ea4b0d0853c52b2743c5502eaa482062d403ace225

SHA512
b77e909108f6bbbc8e16f0bf9618b4a0ac0b33faf704c67a1f6a66f30f490733060c39750de4b2c688e09de3d37ba36d7145b277f4ca0fa1e63783e8d3b61d92

Download Submit