f53baa8d4c38fd4b0755bde346c10ff2c616852e2d19e66f0b8e12ebd365d579 | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
08/01/2024, 21:04

Sharing

Report Analysis Logs

General

Target

Merchant_Statement_461202159889_Dec_01_2023.pdf
Size

149KB
MD5

b588d219c30885b1098fc9fb9578bda0
SHA1

4ebfe69f66a44c03fc2044b28cd95164e7ab379d
SHA256

f53baa8d4c38fd4b0755bde346c10ff2c616852e2d19e66f0b8e12ebd365d579
SHA512

b2edc0e5e39a600c2566014e38e14e1620e07cceea253ea4e93fbd4151851f39347ffe51b2b5a8e06f3fcf7117f43c893c3cd0b8ddb3b22e271f96eef5c25450
SSDEEP

3072:zh97GJuB1sZPTU50GnfAq9eyH2YwnAoKJ37L:zhENonffH2tS7L

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
880	AcroRd32.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
880	AcroRd32.exe
880	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Merchant_Statement_461202159889_Dec_01_2023.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/880-0-0x0000000001140000-0x00000000011B6000-memory.dmp

Filesize
472KB

Download