48d3873a709cfb07cd8aaa61a24313018b172eebbd905a7548873645b5d31df0 | Triage

Analysis

max time kernel
143s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07-03-2024 06:17

Sharing

Report Analysis Logs

General

Target

Leeb Wolfgang pdf.pdf
Size

76KB
MD5

9bdf5d7231f691464b87070f2e43c5c4
SHA1

19942d12ce81a370e531a8c815da0224e4355da0
SHA256

48d3873a709cfb07cd8aaa61a24313018b172eebbd905a7548873645b5d31df0
SHA512

92f54862b6328543a09b44d9a35aa141ccc35d40b7c15ac5687b4e818683b2b10f214529ded60ec98951c974b180a0e742ff97f2b5e1cd66719692aadea4848a
SSDEEP

1536:C5B7pFjUUb81Vsh2qJnXwI9wOPb6nj6yCTnmFBeEgED61:C77pFQQKsEgg3ybeFCSFBfgww

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1640	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1640	AcroRd32.exe
1640	AcroRd32.exe
1640	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Leeb Wolfgang pdf.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c61756e1d7a6fea6c12b5a8fbef2e980

SHA1
95aa8d2cece029e4610e6dfd72b02597c0c4f3f1

SHA256
8be9562a2c261e1741ce15f81bc37d602bc12d1a55626f16bcbbb1dc7761f3aa

SHA512
61c1d23b72a38481ca227f510ca724bb339ced96d3581f5d256a23aceabf9c1ef6ce26adc5a5bcb825c5479687e93afa63394a88715817f23c948f5f31829fa1

Download Submit