eb68567e58b1a0513556c4e7f60d1a84961f5a53ff9bcba1c9ec7b9ca8d17490 | Triage

Resubmissions

03/05/2023, 09:42 UTC

230503-lph2hsga5s 1

03/05/2023, 09:36 UTC

230503-lk9zfaeb72 1

Analysis

max time kernel
150s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
03/05/2023, 09:36 UTC

Sharing

Report Analysis Logs

General

Target

Aliquam.pdf
Size

30KB
MD5

5f6f338fbd448bee359c4fbdff7ce7ec
SHA1

8f80b1175a2df07206c0c519b337d8dd53b9f9f9
SHA256

eb68567e58b1a0513556c4e7f60d1a84961f5a53ff9bcba1c9ec7b9ca8d17490
SHA512

c550c879c4993357aa23149765794d6a54683ede5fe456ba79a24641b0c8e3842912e3ee45d61e34c189df39d4971d1b456529060f75b019928410331b314f96
SSDEEP

768:BAufVQJjgBHPAXvAJ+oL4IyCSUzXZsH2mkj09ei:CEVKjgBHWvAJr4Iy6OWm4q

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1668	AcroRd32.exe
1668	AcroRd32.exe
1668	AcroRd32.exe
1668	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Aliquam.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads