8e4663daf1269afbf7792604b9545928042d5068251ca6bf9b99bbd32666d69e | Triage

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
08/01/2024, 14:30

Sharing

Report Analysis Logs

General

Target

Cepsa Employee Benefit Enrollment.pdf
Size

5KB
MD5

21651c07de23f080b9008c88832c9f3b
SHA1

63c6db0ef56b9ee3c5dd0b06f872f2bd821fa5bb
SHA256

8e4663daf1269afbf7792604b9545928042d5068251ca6bf9b99bbd32666d69e
SHA512

5e805b9f53dea66cf0d20939a6dfd503a0d9d58eb158a612bfefcf2e13ec7f74753c2ff7a800c59ade88f64d77078f5272f8bd514786bb9bcd2365b96d5f4520
SSDEEP

96:Bvbqymy+r8DRHHtD+f5HZEAUb356jRFAEJzMexK:+4DRHHtqfMAg6jxK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2460	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2460	AcroRd32.exe
2460	AcroRd32.exe
2460	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Cepsa Employee Benefit Enrollment.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c752a8adda0ffba2f289f66a855d4e74

SHA1
3e7c9a1f086d4700207a02bd4b6fb898702d66f5

SHA256
860764841c7c3a0dcaa120ff849aa2f8aa7b0a3320d671231f8f79c55845fa32

SHA512
1a31bf8869046fc1848a5cf37cb4cc720dc4fc8b60c35eee4a8db5dbe0dcd951702b7cdb2577a43f341dbe673eb28380a7b0f8e3b93e73cdda1d82d9b5d67399

Download Submit