2c00bbb3aa78b1c9802bbe0ed9996b7a60519d0f08fbed48be7439314285628e | Triage

Analysis

max time kernel
130s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
17-03-2023 17:37

Sharing

Report Analysis Logs

General

Target

Norton_Invoice.pdf
Size

215KB
MD5

65087194ddbc3e328ea69b470ccfff5b
SHA1

44a2909c9ecdcd6d72f2ed13015c31460827059c
SHA256

2c00bbb3aa78b1c9802bbe0ed9996b7a60519d0f08fbed48be7439314285628e
SHA512

f9412a6341ab9b9ef6522e48aca507fdb2871da54592c77c49ac904dcff380788127fee9ab55a679ab3cf3d643ffe09e957164136225ace71c4d2a2b3f8ddfba
SSDEEP

6144:FhRgr7beOTj32tI91wwMTb4K4L7EQgJ3lno/:/M7beOTr2tCMP5/QgJJo/

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1336 AcroRd32.exe
1336 AcroRd32.exe
1336 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Norton_Invoice.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads