5a87ac399ac9aea052724ee93733ee994efdcf59007449991d0419d781f8e181 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
13/07/2024, 14:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

invoice_2008995168.pdf
Size

7KB
MD5

e46d3540d8c8ed22259392adb7fef8f3
SHA1

a74ecf4df8ec0b36ab9b00c950e7e4fe0c8fdabf
SHA256

5a87ac399ac9aea052724ee93733ee994efdcf59007449991d0419d781f8e181
SHA512

a711367a933450d0599434c84c451dbf8a5789474293987943f328c4b25351875cfa49ea0ff4ffc15a11f08bd4a08ae16a6ec7664582461a1aded20fc44392d2
SSDEEP

192:b/Q3Puh1V5YMR88WhPb3AsW+LhxNPXNVIAIWZR16149ZT:b/Qa14i88WBb3AshNP+km1mT

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2136	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2136	AcroRd32.exe
2136	AcroRd32.exe
2136	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\invoice_2008995168.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
68aa00e34c85608edf8e991383c14216

SHA1
668fbdac7519a76e321162245fe9b77f27b88a2d

SHA256
41d63d74882ce08f27f6b5c225a1de3d5f674a7b3a5ef9be566dbb72d9fea6f4

SHA512
3c51bd769ab2ea38ddc2aaddde60dacedc777437b7613f0441bc7fd70908ea1355406991716653d5a0634b24e7c6d5ce8a10c856c20192869b9da74648613936

Download Submit