394241ae21314b4ea3ab32052f426a797d3aa1b0c761551921665f50071f2bef | Triage

Analysis

max time kernel
152s
max time network
128s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13/10/2023, 21:59

Sharing

Report Analysis Logs

General

Target

guide.pdf
Size

2.2MB
MD5

cc175e5535991e4b406c2fb024a6f025
SHA1

e60a185551e2347c65704d18b47c66f7b2702326
SHA256

3e144a9ddcedccf2bb037de7c9f86d8ede2da069526fd56d26f041d9259213eb
SHA512

a3ed2d6ee7852c1e1425209a12ba932c1e459272691b020676068fed23ad6ca2afdbcf468f4040fcb67b252c64543ca09d9db18a35b83839353a4c103eee44c6
SSDEEP

49152:wtKVY8ikrfyQnaLPf1dyMP8+84aviiebwcQmoSDQMUg1KFQnzE/55ra:wtOnikniXDNNYIwThScMUUpnQq

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2288	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2288	AcroRd32.exe
2288	AcroRd32.exe
2288	AcroRd32.exe
2288	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\guide.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
038785c9fd6cf84143387641baefe984

SHA1
b1b4ded6269ef7fb8c31023fa5fde923c93c1ab3

SHA256
738304f84c4b71c4046b7e4093ca0d5b6771e312458ab6296335a62b30b17524

SHA512
f601feb2ee194e7c1bcefbb1ec3753063783f7358cb06f544b32012cc7e8fe6531f2bdbbd138061f3071f49a82279fd2846e6b32f51f7491d05ebbb3699fbc6b

Download Submit