Analysis

  • max time kernel
    43s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2023, 07:00

General

  • Target

    formato de pago.pdf

  • Size

    9KB

  • MD5

    48ef653b4fb2c65c12114b8db79d9949

  • SHA1

    74906cf19321b623a45fe854ed67c6358acfe71d

  • SHA256

    70fb53eefbbca0dfa8f5919bab588a81b44d8a00455cdb8542dd3e5dc9027c85

  • SHA512

    2b6fa55bea0fc8cdee7c9664fcf1cd62d9e318157f5cf859383b128be2aecf5f15058aa91c68042679915fe844cc7ab3acd2f6606c255782d0fe8bad347bf790

  • SSDEEP

    192:EdVuqg36ii5s7niihiiiii4iiiJDXV8gzQyerYLelczPaZvrhbQAVu9pC:EdVL+6ii5qiihiiiii4iiiIgzFbLmBrQ

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\formato de pago.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1668

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          293dc1820f88abff627df6ca0431d55f

          SHA1

          4e7626df45955258136f9b1be3fae976118bcf36

          SHA256

          0202be7ae07b5f8001c8e44277dcf0ae883be972abbefbe04d7ecebbf95b432f

          SHA512

          105f07e88892640083bf5de7161b33106983bed488d5dc21a1df6cccc9f7cb7304c6045fafdfafaeee832768230ca91e745295717902c81c21cf1a9257b1117e

        • memory/1668-54-0x0000000002040000-0x00000000020B6000-memory.dmp

          Filesize

          472KB