e18f524be752b094f7ed09524e3ccaef2eaf87759bc6c84ed9e3b9418fe33d07 | Triage

Analysis

max time kernel
150s
max time network
121s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
15-05-2024 08:14

Sharing

Report Analysis Logs

General

Target

СчетФактура.pdf
Size

101KB
MD5

1c84764755d37b494b718a78ff660b29
SHA1

d1ed2f9ffcd0d80469684204754571dad4a026aa
SHA256

09c5d523ab5f3ac8e1de1321d5482ab2898741042f9faa6c08ad7b0b1da9cf46
SHA512

ad4f965993efbe1dcc27bc3d683bee70119dd92918a9e71865da28a26a55d0054afa950014b5063e994efedec7492de07ffdab082dda371f0f901b6ad1fa53c1
SSDEEP

1536:oZqlafco0WKRgLBCkV1Dy0mODJjli/aEL3+EOHOFDoDpzMc023:oZqlafhKORbGkDJZiCE0uxoD2c/

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2204 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2204 AcroRd32.exe
2204 AcroRd32.exe
2204 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\СчетФактура.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2204

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
8b3a1733f0af3852caab870f309a9996

SHA1
28aea752f497a9e1b25aaaa4df2c3dcb27062cd0

SHA256
eb522eb13e5783cc42217ffcd51f4f4ce260c2e4aa47c27ea027c136f8cf2f36

SHA512
3f55608e36618e80aa8855245dd1860cc2a02ad8e759c3132c59d7e69b817313b51ca9d0e5afd3f20cb3734818adff6f1c8bd337632f54f7f6c10f73871d6616

Download Submit