d2d5c853a3fcc4f3139cee93d354b8669f6835f9fd67d99393dce3f14ae59053 | Triage

Resubmissions

19/01/2024, 14:45

240119-r42p3agaap 1

19/01/2024, 14:38

240119-rz5k6agea7 1

Analysis

max time kernel
149s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/01/2024, 14:45

Sharing

Report Analysis Logs

General

Target

invoice_7019825112.pdf
Size

39KB
MD5

56ed566bbd48b6bc1e036bd50043e32a
SHA1

1bd6c37e55ca5a1a0165e4214c6f45bff07f9556
SHA256

d2d5c853a3fcc4f3139cee93d354b8669f6835f9fd67d99393dce3f14ae59053
SHA512

6985284ea07eca8bbe005e175479589073e277f4d0b33b0780bbd39aa1a3cdcfea5cc16ca6fa96765d64df297129edfe709e1e07fa0da56568269a3b225fe471
SSDEEP

768:9BFzBWCiZ3ORLqsDPSNlXeUrqNI3xw9LpzoEjxE711ZkNSNt2c:rnycLqsjSNlZ4I29LpzVy1USH2c

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2504	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2504	AcroRd32.exe
2504	AcroRd32.exe
2504	AcroRd32.exe
2504	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\invoice_7019825112.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
50273e3bdcc5c04c64150688c8fad107

SHA1
634f1e8b79f96f341de1e6e898e3d6bc1b127496

SHA256
7011f023be84a198bb2fc2e2851fa58f26041d9450d6b0b60f011a5a5899b190

SHA512
65e4a75028ab2c9ed7ccd00cc81db9ad047fa8ff05912f2fa1924c86d9e11a0df8b6e10adcabc4e14dd3491725117c73223348b6c8b1ee34c44f7406a004fdee

Download Submit