0d9b8ef4f22296e5349cc1de0e4f6caff58b11f94696520bafb6c4f06df9c72b | Triage

Analysis

max time kernel
150s
max time network
123s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11-10-2023 05:15

Sharing

Report Analysis Logs

General

Target

CUSTOMER-CORNER-BENL.pdf
Size

553KB
MD5

0b25033e6ebca836439e79e26b4b26c2
SHA1

d318fddfd816764a2fb977e1be74c0a5f90f6d7b
SHA256

0d9b8ef4f22296e5349cc1de0e4f6caff58b11f94696520bafb6c4f06df9c72b
SHA512

e44e89beb28ad2d47cc657582c9ab576c0754dccceaff3c5aa1cd664b12a7c34065a25a0f0ee626a882fd308b5240165f4eadcc0c7a722fe6bf401a07edae382
SSDEEP

12288:d3fLH/6SiaGRzmJlDFGte0UvorigeEerUC0XSxnD:dPbSS3D8WAr1eEtY

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1732 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1732 AcroRd32.exe
1732 AcroRd32.exe
1732 AcroRd32.exe
1732 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\CUSTOMER-CORNER-BENL.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1732

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
5494398d4169258993f3bc762b9dac29

SHA1
9bcb8f422008c30b84551873cddf36926cbeb4aa

SHA256
4262673766ed2643c937a6e87f4ed7aff3c2a197038e9b86d57ac9d6bca97e4d

SHA512
2c21e93246269bf5b87d0cfe2e84884f6b5caeec4dd1c35468064282a70acb63131ab73c861c7687b362f0f967f0c2a13d31a1165581ceaca9db58a2e81c6d67

Download Submit