5a8c46e899347ef36b7e6796791d13ec51713ab9327e4f61eb21bbf5eb1020b0 | Triage

Analysis

max time kernel
150s
max time network
126s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
07/11/2023, 14:43

Sharing

Report Analysis Logs

General

Target

Bv9ARM.pdf
Size

1.4MB
MD5

2e35bdb253a897a815ca1b24a1e74591
SHA1

e3f42b286f17f3902083b9662474b76775990dae
SHA256

bdada725a1c62ea7c51a71b25d827fe7b3f82cb6bda81ab798661c984ebf43a7
SHA512

7432a1cb815d52272f8e383300ca7db307e96a9ac08d0e56228034cd5a2331add0c3b40106d5f837ee34fcf65bbf0015586906ab168b78ce82dac149fd2bb4ca
SSDEEP

24576:RhiYDOuJIwIGWAS7IxYX8kS4EG8B3KbswR9/ZzgI:HVhJdIAa8kSc8BWcI

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2248	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2248	AcroRd32.exe
2248	AcroRd32.exe
2248	AcroRd32.exe
2248	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Bv9ARM.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4a0027c55b0e82cf2a64c50d75b43f0e

SHA1
0f9e602694920f5243a126464259181aae26d8bd

SHA256
8151ab444875a83359acea9ea095b7cba031f249697694ea958d261521e63972

SHA512
26c90cf936fa03e3a85a6493087f948726556b5ff445c33b3d6c7a645b90e8c56106ee8487025bbdf0e4f7939469b797cde5fe7939d070d8b75690e06ba9829e

Download Submit