0658d978857d17ce76230f336cc8afca687d626462e0b7c198f079e6670d286d | Triage

Resubmissions

15/01/2024, 05:36

240115-gak54sacfk 3

15/01/2024, 05:28

240115-f54ehaabgk 3

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
15/01/2024, 05:28

Sharing

Report Analysis Logs

General

Target

INV-50369845.pdf
Size

79KB
MD5

92694bd18054d4e229699f6212202e94
SHA1

15ab5879ef6ebad38ed7d80eeea2b116708a84e3
SHA256

3e92282aa46bd4acda44d52d857cac09e53d83e1edfcb312055ab49436898324
SHA512

a3f9f87c5b61cebd555b6f4e68887e6d19680f34a80ed4408c1a3b2eebb64d61508a00a819f91e84de753cc5e7973f4d9189060da94f78b09c1235502b425b5d
SSDEEP

1536:bfqkx3IxxGPaw05tyasGXAgKViKzMqf0HJ58cqBHvyUA+lRh3/mGe:DrUwaw+yasfzzMqfWJ5bqcmFP2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2964	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2964	AcroRd32.exe
2964	AcroRd32.exe
2964	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\INV-50369845.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
8ddcaf9c08a91194836117e369b35365

SHA1
e74154099fc9bba9f3a43abc5799327e56bc93b9

SHA256
eb9e280db82e912c9ecdc305e12ee841fa7569d83d11aee67b2cd0c4ca36b7f3

SHA512
d8cf5bff1fba6f25d508ab090920ed9d484961b83c0864b67c9bea2535ac2650a4385b9db2f18803402e092a8fd19b0b1c5393e34056b0c19e50f8d14cd73f75

Download Submit