cb9b9f8d8cac9d52e977d07db47ea77dac2ea3c15054c628036c080e3c40ec12 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28-03-2024 16:22

Sharing

Report Analysis Logs

General

Target

Thailand-20211210-0837378-FGT-29.pdf
Size

43KB
MD5

8a0f02194d536d153983afe6417dcec7
SHA1

8e65827bef573e922858530d45341096b4ac0811
SHA256

bf719ab96e69bb9885b9c4573fe903d45434b034a961197b26ec7d2fce58a27d
SHA512

2443a08c5fd6393b536f7c2c85c72e8fe43acf2fcbb27ec707991ba1332dbe93208e8136d985d62e02b3241a5ce53230aa064a64069858d91c341af510e1d595
SSDEEP

768:2rWwmoRUC/PJqaavUUSM54zs20umOYF7ne:sWwmou4JqaavUK5ks2rmOYE

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1048 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1048 AcroRd32.exe
1048 AcroRd32.exe
1048 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Thailand-20211210-0837378-FGT-29.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1048

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
0ec1c84be82e55ba0548bb560fa64e9b

SHA1
d63b11eaa917e269df5ce7219789e959a495cc7f

SHA256
19357689ef0567eec8feec686481c4c4d5651fc8e0b738bf8f092df2c8ea3248

SHA512
afb8f657bc84d3ce1719d9496be72576f70f7b7ef25f70f046eb1b74938ad9d9b3dba2ba3e50de8e2af4788a324fc21bf0836cd9ff52cc5948a20103aac8ad72

Download Submit