393d5e481f3ae653642be73fee229d0e76ad5c76a9ca52f887a7762c4fd0bbc4 | Triage

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-05-2024 06:03

Sharing

Report Analysis Logs

General

Target

Factura-Janeiro-2145892315-2019-10_25/Factura-Janeiro-2145892315-2019-10_25.pdf
Size

1KB
MD5

e48bc8e4be510923e076bfb5fd051c99
SHA1

e9b9fe3bb748ce8675c0d6d85b1ac88b00f9d421
SHA256

6b739e9916ce80c6c041ef2576780ef40e6146c23efe06f4c7d497350b992d3d
SHA512

a1703707054110a9b9796007a8a72b557745784b103aad0e0c413abc84d352d221472ef01309111fe52e1b064f7b489efbefd553597556de25a30e4de7f40336

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1948 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1948 AcroRd32.exe
1948 AcroRd32.exe
1948 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Factura-Janeiro-2145892315-2019-10_25\Factura-Janeiro-2145892315-2019-10_25.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5625c9b9fa733cfb6bc22eac87c3e33c

SHA1
30565c041086c7c1afd8c48a8d1c0058f43fa189

SHA256
040a1e63e39259061354a3eb622d939deb38dd5f4471669febba63d6aa3d12ec

SHA512
541f432c27607d0c32531f85f4f31f0ba3857df4631929a4d44537c0725dc2167213fac050d92e0f609e8e419c36d2fe99cc8e360fd4df94d7735525743aa099

Download Submit