e4307e879e9d46fcf89f1a8a9889f97a5226498f83dc0991937e148c0b9d22e3 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
30/05/2024, 22:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Garantie PC Wegner.pdf
Size

112KB
MD5

c7a97e69a9eab04c7abe3968356c1005
SHA1

0b180b2a3b372622562d0e1ccf52d5fe20dba7ea
SHA256

e4307e879e9d46fcf89f1a8a9889f97a5226498f83dc0991937e148c0b9d22e3
SHA512

72ab88d66766638a1e37c2514bf3d5c8326875db73939e09f94d97a419d9392587891cb3ddcf03cb77d8dd5513e3e2e2eac73493202ff51aa7f3cae7de0112ad
SSDEEP

3072:pCLkKEVnNdgrNJPKnX1n6MKAeXYe4fJUGgQ:2v7CnXkMKVYvOGB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1700	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1700	AcroRd32.exe
1700	AcroRd32.exe
1700	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Garantie PC Wegner.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
8a4094dfe5b40c932263b314ce24b0eb

SHA1
1800515960a5ec7ae3f09ec8b07766474c42f959

SHA256
e5f3a1fac1da571be69af857d600641e7d3adaf2f20cf620133cb17e72622040

SHA512
410a8d50209c9f06276047ccdff2fef6889c12fd80f5d78d7ef96441f916b767d250bf8df74d831f00a62903785f90995f35055ce242538897c87bee82780562

Download Submit