d2d5c853a3fcc4f3139cee93d354b8669f6835f9fd67d99393dce3f14ae59053 | Triage

Resubmissions

19/01/2024, 14:45

240119-r42p3agaap 1

19/01/2024, 14:38

240119-rz5k6agea7 1

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/01/2024, 14:38

Sharing

Report Analysis Logs

General

Target

invoice_7019825112.pdf
Size

39KB
MD5

56ed566bbd48b6bc1e036bd50043e32a
SHA1

1bd6c37e55ca5a1a0165e4214c6f45bff07f9556
SHA256

d2d5c853a3fcc4f3139cee93d354b8669f6835f9fd67d99393dce3f14ae59053
SHA512

6985284ea07eca8bbe005e175479589073e277f4d0b33b0780bbd39aa1a3cdcfea5cc16ca6fa96765d64df297129edfe709e1e07fa0da56568269a3b225fe471
SSDEEP

768:9BFzBWCiZ3ORLqsDPSNlXeUrqNI3xw9LpzoEjxE711ZkNSNt2c:rnycLqsjSNlZ4I29LpzVy1USH2c

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1016	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1016	AcroRd32.exe
1016	AcroRd32.exe
1016	AcroRd32.exe
1016	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\invoice_7019825112.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6ec1424830739bb80fe22619ef459106

SHA1
e89aaf7adf62fa6442ea0dea3f97fa863be5e50f

SHA256
5e84f4fb37369e3852b2a18c003d1e29b226a5b70f7941b795e2a5cdb20baec0

SHA512
62003aa233e3646fc129367a685330599d49256ee7a17ec138b8ce7a737f7557317b943b5f41e2f0b7fd2d1896bc098a947f082d30aeaea6d1f4b70943e87d59

Download Submit