e9a0a2d8c40370547dbde0e4e80e0134be9e61d5d5a2c6079940b2e6ff6d090e | Triage

Analysis

max time kernel
193s
max time network
34s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
07/11/2023, 13:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Bv9ARM.pdf
Size

1.1MB
MD5

4b826cfc5e4c44522b07f9272fc44237
SHA1

87f6c7952ee065eadd0ec0a82446e4cb1f5134b6
SHA256

0f7e626062db9dc843175901940788e84620b7031f3968d46c268e57f824a5db
SHA512

8f59334eb8011b94939a0a3133972dfae02acce4d4c0d9cad06a60079c22325934edffec541ff53b388454cf85d189bf5be72196bdcad36399759e17a4ed6436
SSDEEP

24576:yiiFDOLJKf99hgLPwA6to04FUc9kXQKNS:rSKJQ9hK36y04WcGXrNS

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2368	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2368	AcroRd32.exe
2368	AcroRd32.exe
2368	AcroRd32.exe
2368	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Bv9ARM.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6c40b137af3db739b7c95953f0c42b5c

SHA1
4e4cef934b8ffd99928d2a2bc03561827a960ed1

SHA256
95bf8d537f9d47536f2131938a284653cbfbff06e1ac65f01520452a71922f32

SHA512
fa2ca2632e6329eda83e3018be1354f59f113c9073fb25b09684e1be069c3bc6c53f2dbcf316cbd5de6c95a0e22abc737319bd4964372bb8b9a8c9de39749649

Download Submit