0658d978857d17ce76230f336cc8afca687d626462e0b7c198f079e6670d286d | Triage

Resubmissions

15/01/2024, 05:36

240115-gak54sacfk 3

15/01/2024, 05:28

240115-f54ehaabgk 3

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
15/01/2024, 05:36

Sharing

Report Analysis Logs

General

Target

INV-50369845.pdf
Size

79KB
MD5

92694bd18054d4e229699f6212202e94
SHA1

15ab5879ef6ebad38ed7d80eeea2b116708a84e3
SHA256

3e92282aa46bd4acda44d52d857cac09e53d83e1edfcb312055ab49436898324
SHA512

a3f9f87c5b61cebd555b6f4e68887e6d19680f34a80ed4408c1a3b2eebb64d61508a00a819f91e84de753cc5e7973f4d9189060da94f78b09c1235502b425b5d
SSDEEP

1536:bfqkx3IxxGPaw05tyasGXAgKViKzMqf0HJ58cqBHvyUA+lRh3/mGe:DrUwaw+yasfzzMqfWJ5bqcmFP2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2080	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2080	AcroRd32.exe
2080	AcroRd32.exe
2080	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\INV-50369845.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1a41e01d2613fab8550e4e504ffb61aa

SHA1
4ce3a39486de98cbfe1ac198179f015ed86b316e

SHA256
58925991368a220012dc3822861991c6802d3fe2ea43b9b88d0a22c001961eee

SHA512
cc1ee4d0daf9402fb1cf18237ddec0e49d14f84052c1b764e386afb81774f231d0096f3d2d96a16b45d0c1d31ec157d4d7a7c019954bb6f7cab37e2e3a3c22d0

Download Submit