6ec20b583d4e753ca2b304647bfa8dd492a1eb79aa5d68a8d55c205f1e66a717 | Triage

Analysis

max time kernel
151s
max time network
36s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
07/11/2023, 14:38

Sharing

Report Analysis Logs

General

Target

Bios_Utilities/AFU/BIOS Flash Guide.pdf
Size

207KB
MD5

708d5917df9e776b915aad1fad664e82
SHA1

fa57d093790aa7e5edacd65041e85d9f9dcc06c1
SHA256

fb30ff7ffd8003656dda3c152a12a1b11784500bc589fc173be30bafbe981e71
SHA512

37e72ab30e6605561f461da62cc9928c72dbec9adb641c359d89ff575b3ab21eb865cc23810340bb317702a8a9014001b39ed0733c8198e3aeb3960c169d391e
SSDEEP

6144:T2qTec4Mxy2jyzgSAvpr+JWXC8hQpNEoYsP:iiec4MIiSQprtS8hQooP

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1860	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1860	AcroRd32.exe
1860	AcroRd32.exe
1860	AcroRd32.exe
1860	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Bios_Utilities\AFU\BIOS Flash Guide.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f860ba1936241164ceb3e8a4e647a10b

SHA1
8d93e2027eb28fd4fca3ca1349093c6ea1c01710

SHA256
c4ad822cacc1bf4196c34dcc6b52904dfb4a4e8d26f3b360648dcdfc60005774

SHA512
75b5c5ec420de1a2bcb94c58bc740374f6e6651369c782ff404f63ba4a0feb71942edcf9a839af6577e931a24e511f2476c193aa65221f291156a4e69e2b17bf

Download Submit