43b3ac06da8a85156f88cb3a9958cca7885742f034bb2721bccee2b60ecf2bda | Triage

Analysis

max time kernel
357s
max time network
358s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
23-04-2024 13:07

Sharing

Report Analysis Logs

General

Target

Statements_SU5164222024.pdf
Size

30KB
MD5

fee2e86065ba00e54a285f45a7c3b00c
SHA1

c48895fd48db6e545a01b1ff3f6bbf5239f09d36
SHA256

1e96466ee0aa11b1a6ee59d4e6634bb1f868ebdd1613a74ad5a06efe2f40255a
SHA512

24c24d7a60378afdc27125dc27c6494abb9ab0ef867d45432cbffd131204381d2e6e9197207f68f2fe67cd4a4791d27b02fa6d2b42055810272233fa5be282cf
SSDEEP

768:8kNlJn3ae+bkgmaLWwbww1vChy5KLRJ1nRlNm1yK:ZKe0khwbww8rFJ1RiT

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1776 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1776 AcroRd32.exe
1776 AcroRd32.exe
1776 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Statements_SU5164222024.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1776

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
c3ecbc618296e3d4db08a0a6f098e615

SHA1
2fcd75a6dda329bcda215c30da5e5742b5521746

SHA256
0ee077f8fe610186a19c7c6dbdf9b828e934fe434d1b7cc0d0c505c83255aa1a

SHA512
ebc15342bbb325fa532ac319d084e1fbf5fdacd86df0ee59d3cec913eeaefcd00c212d1b93403f3fce7fcd420e80a8231dc483cc5e7c9c1b23a39f3b00ba031e

Download Submit