197e6faae76dc4e23e63d07a16baa81bc47c81a0c015ff58759cca2df998953d | Triage

Analysis

max time kernel
150s
max time network
127s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
07/11/2023, 14:22

Sharing

Report Analysis Logs

General

Target

Bv9ARM.pdf
Size

1.2MB
MD5

b16fdebd9486c552500862ae86c32f19
SHA1

534da49e9505d55b38e35ac154ecce8a1e1ddb4d
SHA256

cf36314a6bac89b6e99d0f2a794bc8548e6f44bc9305d76f79c5863e645cdf62
SHA512

6720fa31c5079f8699b689ac40f9b70d586940b2798d7a933e97aff152bfe38848b31020d15ec9116f62fdd21deed465b510c599559992681d1f801899bd0014
SSDEEP

24576:YsivDOFJSc7uKQBCjyjv3YFtFAMPDSf/+pN:XkcJSGqj/2NeK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
768	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
768	AcroRd32.exe
768	AcroRd32.exe
768	AcroRd32.exe
768	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Bv9ARM.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0d9137d856eb09082141d3a17ebf2d12

SHA1
59d1b0a226803998749b787d92cca341a452ecfc

SHA256
ba4f496f33d77ae9c8ad88b824b60669b4e2d197a09e180595f9bff3b912dc05

SHA512
1a288bf6411756a5579d2f8502d16c7820b7914c4c37a760182d05bfc29ecf55ca6a34e0dc0af4215014812cbc04d07ff76e56b12e5408374af3377665eb65cb

Download Submit