26361aaee35dbda60d980f5eb5cbbb3977a1ed8cf251f5a99a4cf9b175556dbe | Triage

Analysis

max time kernel
39s
max time network
18s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
29-09-2023 20:50

Sharing

Report Analysis Logs

General

Target

Customer-Support-Contacts-Brochure.pdf
Size

127KB
MD5

dbadd7701f81d05a9b153dbc16c8966f
SHA1

a651ef7c21528ad1922c4e14b3f518422a7e2cc7
SHA256

26361aaee35dbda60d980f5eb5cbbb3977a1ed8cf251f5a99a4cf9b175556dbe
SHA512

8865b8b7f2133d9290c78154531aab310cb31a58ed0eeb1bc1ef2de6338909678d2100231df038ffaab14d31fcc45bf358dff4e43fd3ad1cbc2c5b15fc5eb419
SSDEEP

3072:ww5WSBRIuM5YXeFHYdaDbEpqLUzudqY06Df:F5ZIuxXeF4d53N6Df

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2920 AcroRd32.exe
2920 AcroRd32.exe
2920 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Customer-Support-Contacts-Brochure.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7ee83b606d60d82396b8571438bd9483

SHA1
5a15c46e27a02783479a1dcda0530e8a5d26378f

SHA256
d007e86418634d563007ab91f240b8cdb5c0872d14649c6b3045a56980513854

SHA512
ab2cd469c877a03ea7ec82dc60de07eb565118ff62fd72e0582113920a73b826a477604d293aa6ec1032b76b8d3765a95a99b03bdad9234450524b4729c356b0

Download Submit