e5be0de14cb7cc4ab85202dc86145717a2ac0b0852ffb7112dbbfdb363c94b9b | Triage

Analysis

max time kernel
152s
max time network
129s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13/10/2023, 00:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Nf.pdf
Size

32KB
MD5

9c7cf1fcb394624d91bccc9e7f46efbb
SHA1

9344edefbce9b865af1b61842d55c731bf95a0c7
SHA256

e5be0de14cb7cc4ab85202dc86145717a2ac0b0852ffb7112dbbfdb363c94b9b
SHA512

ec6d005310b5edb467b0a3bdeb4d8e46ff6a4fa280aa1dc179a74ec34a9b00df21be2cfa446a2d0751fdc5d3b4f4db3900295d59b2db643bc21b48e05ad87629
SSDEEP

768:tS7b0xfkIgwyAivoPSYWcE6Sxxxownizw:tS7bafkIgwyRySlxx++n

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2456	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2456	AcroRd32.exe
2456	AcroRd32.exe
2456	AcroRd32.exe
2456	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Nf.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9435b9be23abbcdb7b2845771a08397a

SHA1
5838642f43b7bbbb57c2f407be4c75602d78ca51

SHA256
873a6e26d47a9ce1c672aad00096b3874a6cd052adf5d2d3ba58065429471488

SHA512
ef162512233d42a17cdd47090c5db325d78c47ffde0d61b89c25d8a01667f53ccbd4f16c7d463ebf051a2e53c7121ccf37bfa88609662175c5a6cfec22df7322

Download Submit