bd517a898681dc39a081775c27b96cc7068e04227c7d955fdceb8aab72835b70 | Triage

Analysis

max time kernel
19s
max time network
19s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
20/08/2023, 19:20

Sharing

Report Analysis Logs

General

Target

Poliza_661_5222300100349.pdf
Size

81KB
MD5

bfb99f01b249d86244bedca29316f336
SHA1

e5e4c40a8de1586d8e94c6848e6f3380f56ca3c3
SHA256

bd517a898681dc39a081775c27b96cc7068e04227c7d955fdceb8aab72835b70
SHA512

26e1641e5ef07fa732ab4bcf10b8c2856422ee8a134028ff096baf887298b964e014da7b00579dc12bc5b46e97f5db5a22636058a6b91a0e7075974c39f82807
SSDEEP

1536:7k2G0OvXuXtrFNol8NE17cZFuHdpYw2cciUK/2CT5lK:7rOveX5FNG17uFu9iUUK/1nK

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2592	AcroRd32.exe
2592	AcroRd32.exe
2592	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Poliza_661_5222300100349.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2cb69fd668eea27c5542b8cbe6a01280

SHA1
0488b722083196f30d0d47de473e950c0bcc7474

SHA256
d96fc0f07305cd451b20631ef7bd1c9c252dbd84d92db5d504c22acadcc3eb77

SHA512
0f11b22e1eaf9057dd83ddd74a0537d445c2c8a73b0288eeb0776f2d645aedc6eb7c73b68d8db4b068a24464fb62bc72bdc827abc1051af3e05b3132188f0688

Download Submit