2bf062b39c513e3fe5d5abc47956794310cb88381060ec379f6b940cc45e0a3c | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
05-03-2024 15:15

Sharing

Report Analysis Logs

General

Target

TARJETAS_LEON_15.pdf
Size

513KB
MD5

4bacccccbaefc4d42dc909729299fcab
SHA1

6f1c0969d4e06eade585b860669951218eb87536
SHA256

cf3352d292cb8fd1fa8bcf1d47516c9895fdfe7a29dca5349a08511599bfc5c7
SHA512

6c939304deb7e96401b4ba982ada81b46a7dc3fbce696a9ce87f18f7ab884d7a8bf489c2cd8cf95ac28a00bf313ded06925f434a58339a8b350f569974e3103c
SSDEEP

12288:8cIWlHRpM585Q1twGPSoKzq648xVwteb1km:8c3Hc585QYHzqT8xq0n

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2664	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2664	AcroRd32.exe
2664	AcroRd32.exe
2664	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\TARJETAS_LEON_15.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
16c56268d48f64927bc29b4736a97d91

SHA1
db6043d4e14b956e6e9061a407fc2817d3e397a1

SHA256
0994e3d67f09004b42b35cbe821c1e8b2050c9801b63c45f6175fcc975ea0853

SHA512
5d3f0a065ae7a2e81ee2a2d91b62131d4cd165a6669bc2777fe9e22213447d59ec2442e754f8fa2bacb7b0380fb89175607620c7d94859950539e71420a9e926

Download Submit