3f04d3267f818beec7a5f29a7780282bdf862a71669230b796b77700a494b55d | Triage

Analysis

max time kernel
215s
max time network
148s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
10-01-2024 21:28

Sharing

Report Analysis Logs

General

Target

163.5.169.28/SCAN-atoletter5.pdf
Size

169KB
MD5

c5de2a211a2580c04d1b5349651d3e4a
SHA1

81a25e710c7dc63b10220dbdf39dc48ff11da5f3
SHA256

57b4117e2cf9ab76ed554c2bbf192b9868b94202ad5aaff05a593cf3d4630f85
SHA512

ad3fead8c0e7820e008bdd9f90b443a20eab0dde9d51a1035e8b40f070d7e381e641a8ae00911bc8c0a4a8e341a9a73e3ee133b78abddbbb442f00ce28efd51d
SSDEEP

3072:NPAr51Wqu9r1RRVgz/hdcJ0XWLtSsi6dzRov5dMWP4y0LUD:UBuxHgrI9cLDTMPyoC

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2240	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2240	AcroRd32.exe
2240	AcroRd32.exe
2240	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\163.5.169.28\SCAN-atoletter5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
8c12e7202a93b2af31def90cc98b217a

SHA1
6515fb88493f25305d681d31603b23db1eadd3ad

SHA256
387bce437b0ae8547e300ea5170f3d46855b82e119a6906541a7fbafd55fc1e3

SHA512
6e4374cc2ea37c7e995c3dceefb6ea84d76c7cdaba588fcd7921d079b36c7730bd8f6e5f41383fd9b7d9254ddb0fc84a14c05dfc908f3252ef94a4d05d9855ac

Download Submit