b6a6cf9755934539abec1703158bb67673722709dae0dbfd6d098b1ce10c9c2e | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
11-06-2024 13:46

Sharing

Report Analysis Logs

General

Target

Galexis Rechnung QR Code Mai.pdf
Size

234KB
MD5

192565f9f028bd0384c2c72ffbc289ec
SHA1

670b3f6de98f095de57e2f9dccecccd4647547da
SHA256

b6a6cf9755934539abec1703158bb67673722709dae0dbfd6d098b1ce10c9c2e
SHA512

d16fd8217a63477f530032dc6af6ec7f038e303e7efd82361f7f3e3596abc96df69cce66eae994ecc7e897d16a7d46201295826e6a9fb3d9a2037ae7f4d50a22
SSDEEP

3072:sMplteuHXqdiEFNK4HR6LP+fft+HaDgXNN1+ISfHqTzCg:1rGXcMtc1+M

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2064	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2064	AcroRd32.exe
2064	AcroRd32.exe
2064	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Galexis Rechnung QR Code Mai.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7d8fb76a464287897e0007760ed8cd22

SHA1
d5489f047e628c5e22f75d72c8f5bfc6ef3fafc3

SHA256
de60478ce09170faf4b7b03a26eea8ffb8171fee90f6ec284299ad1b6e2e4a46

SHA512
5dde0b907650cfb00ccadc05c0839429fe09f07ff769509860f9bdc5b4523c855e9e3c0dadb4a5c0f7a086b640a6692f6ef94025bb8cb44e16b2439d474973aa

Download Submit