484d064e8ea89d22531bd5fa86f45c39abf3592c962d43cbdeca74a94a52337f | Triage

Analysis

max time kernel
150s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
26-05-2023 11:33

Sharing

Report Analysis Logs

General

Target

PD26351.pdf
Size

2.1MB
MD5

59020ea8ba78797da07f1d9fecea2a6b
SHA1

4241dce5d092ad2ca06866a3b8c95f54bc56418d
SHA256

484d064e8ea89d22531bd5fa86f45c39abf3592c962d43cbdeca74a94a52337f
SHA512

5d2d9c3f5ae8161d2b0214ad67b395b510c37f0529d7ec9dc3a6db03ee6066b484a2498cccb9f8ce8146251dfd50a83f43af7a422315cd87f732a74633ce15b0
SSDEEP

49152:w995tiu1wLcbbitbGuPnR7exwOJzO6RQs0mrTvshwug4PTbb:m95Au1wDFM/bTU3J7

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1324 AcroRd32.exe
1324 AcroRd32.exe
1324 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\PD26351.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1324

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...