Analysis
-
max time kernel
150s -
max time network
35s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
25-04-2023 16:09
Static task
static1
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
[email protected]_20230421_143358.pdf
Resource
win10v2004-20230220-en
windows10-2004-x64
6 signatures
150 seconds
General
-
Target
[email protected]_20230421_143358.pdf
-
Size
128KB
-
MD5
0b976b4a3c3e9c1345a51c617d990c6a
-
SHA1
026732af7240a7eab98c7d3536f6009e6de6391c
-
SHA256
ab8973775e35904cd1cbee05e4061b204c9dfb0170f21904959b14b6576766fd
-
SHA512
8ff41befe04b9c66ea0797f87d5594efc4808b5b0572802da00916c1df36587762e1e94d7507d2ed070bfd32364c6d91269b180c27d0b74575a72a15a38377eb
-
SSDEEP
3072:X4D9+coxoQ71gQ0IPZ7ocu/MF11I8QEUJJzNSG4ugr+3:o6xoQxgYPZ8cw8IUUJJBl
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1084 AcroRd32.exe 1084 AcroRd32.exe 1084 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\[email protected]_20230421_143358.pdf"1⤵
- Suspicious use of SetWindowsHookEx
PID:1084