3c61b9aad31221a8dbd1e30712b26d1859ee9e35d3a4b252b7fa0b2b68ebde6d | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
17-06-2024 11:07

Sharing

Report Analysis Logs

General

Target

SPI Reader DE.pdf
Size

3.1MB
MD5

2e6aca55bdaeeab7a9e586e4695aee58
SHA1

a629c0857944ec70e644e3f42bfdda5f33590388
SHA256

3c61b9aad31221a8dbd1e30712b26d1859ee9e35d3a4b252b7fa0b2b68ebde6d
SHA512

48907415c4dc4ed9541420b6037dcededab5fac4eed7688a80018388a192004095b5d6c1167caf6b1ab8f3e6c79c32b537fdeb200a43a0d34e376fce3d3feee0
SSDEEP

49152:NKizhNQ2aHehor2aHeho62aHeho32aHeho2iPjsLj:4WueiefeWebIjMj

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2020	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2020	AcroRd32.exe
2020	AcroRd32.exe
2020	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\SPI Reader DE.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
88edcc7feabe689bd5eebd1dbcc4fe51

SHA1
526ef7dc7f2c63067957941b168e6213cc8fd86e

SHA256
8f98bbf2006a34ed41cdae9602ff3d2771aa5ed374780984ccc43a17311bc448

SHA512
e390bc1e5b012c599185b90ea078df548bab9676ef844051e86361ca109c12b63f7dc737ebb60e17f4ba494f7c82c8d7b8b204cb8b4811e32c307e957eaf4de6

Download Submit