2ed55e1ef5864304bdf512b2689387139289d6af2ad3ce715a0b1c1dda5e4694 | Triage

Analysis

max time kernel
120s
max time network
140s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 14:51

Sharing

Report Analysis Logs

General

Target

INV00191466_202312210842.pdf
Size

111KB
MD5

4a7f0362a6293d49184dd7d26eeb266c
SHA1

89eca524ef7a4ebee91185caa51f19db12763ea8
SHA256

2ed55e1ef5864304bdf512b2689387139289d6af2ad3ce715a0b1c1dda5e4694
SHA512

e4b198950ff566c1350726478ddfb215d931fcb635a786b8c96675f05f181eaf043f88b72b31f1ff717664b764fac1eeae6c2425ddebd68c68b150ff01a6b907
SSDEEP

3072:j8bStiZiT+ZZ4wrvJXgCVMN2ujfbnkHHO8mcYkJZ:j8bSUF74wrvJwN9bkHu7JkJZ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2276	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2276	AcroRd32.exe
2276	AcroRd32.exe
2276	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\INV00191466_202312210842.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
03c0705664a9cfe6de0e60141894d5b1

SHA1
0c841ae9f893f024982e909d97879a4b2145a230

SHA256
d788c02264479c787f62c8e71ced9cedea79611c2cfebc26e2d2e02475c68ce2

SHA512
17f9fdc509a4a9107eea26544bffa2cfd0cb94c6dbe9c19ba36c92ade0c7c74e076d9f2a57ad77f168c62f9b4c2ef316d7c164c44b1e248a2c7c73aec5eaa4a0

Download Submit