344ec99b745d6a2d9e512758702be6ebfdf60b9df6bfb12fe79ba0a9ced52bfb | Triage

Analysis

max time kernel
150s
max time network
123s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
07/11/2023, 14:22

Sharing

Report Analysis Logs

General

Target

Bv9ARM.pdf
Size

1.0MB
MD5

b00eafe3a0584804d1662d6f344eb8fa
SHA1

dc58cbeeb333235f7d463aaa823515ffbb911f5e
SHA256

0d308dbfdff749b663144acc16ac952e4b8176d1b5875561ee80fc5790d12a9c
SHA512

78a1ed91c5571d6375211a54cf8034c386b6d44faad9f8779231f260f6925d9378f6aee44ee1bc2933d38647ffa57b0c16fa6c0e59646d3cc3e50bca9fea99f5
SSDEEP

24576:3biMDOpJ/3DYClxj8u10rh4jcU++3/oOaSIR:L/kJ/PDARrw3Da5R

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1712	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1712	AcroRd32.exe
1712	AcroRd32.exe
1712	AcroRd32.exe
1712	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Bv9ARM.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4be261c940c0686c19cbccc0f0b1574c

SHA1
7133d69c43ae0e49623ea3c01758eec5f6d5c746

SHA256
b9fff81884d9f73d0c53d4c558b20b08ea48dbc01a1cd51f80d737c9583da96e

SHA512
bb0d3d248a8f504b199cc2b28d3538b6787dbaddce76a29c0ca83efd5b2f8b7911bb8d028fb6d25f09f43898571b6e9cf659dc47e7b101976a9175eedd3fe706

Download Submit