41d5867f1bcbdb83dd600110e7cd601e2745642d647ae441ce59c4be888aa864 | Triage

Analysis

max time kernel
150s
max time network
119s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
22/11/2023, 20:10

Sharing

Report Analysis Logs

General

Target

NSG652518974791.pdf
Size

470KB
MD5

d613b69111e327cc9e3ad8f692715850
SHA1

b6ec56d161d58380f284e29c2b3ee6ad1166dc99
SHA256

41d5867f1bcbdb83dd600110e7cd601e2745642d647ae441ce59c4be888aa864
SHA512

60ca2816ec4a1299d6ade074b5937f06aed94e479aa97a501514330341cc8eb0226e922af9227f92103aca53b7502551a4ecc17fcbac016f7bdf0a07adfe185a
SSDEEP

12288:eVfCqv6Yfrb2NcQWBFG+ueF5wNiuWjObF:eQqv68boOBFG1rcjOh

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2712	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2712	AcroRd32.exe
2712	AcroRd32.exe
2712	AcroRd32.exe
2712	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NSG652518974791.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
789b4454fb9905c0af3eaa735bf89464

SHA1
15d139261487eaabf62bc09c7c61e8580bc3f7f4

SHA256
4301178a1ebaab2a121fe1c3a49d6e6d07aa452c5c1d99febb345bd30380424d

SHA512
1107bcc7b696a06a41935401821a8f22e6af783fcf18dce8784fae077aeb13236ef991e12b4c3943e634033e73d922f99c5be78db738356d093bfa60fda393c0

Download Submit