0d9b8ef4f22296e5349cc1de0e4f6caff58b11f94696520bafb6c4f06df9c72b | Triage

Analysis

max time kernel
31s
max time network
19s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
29-09-2023 20:51

Sharing

Report Analysis Logs

General

Target

CUSTOMER-CORNER-BENL.pdf
Size

553KB
MD5

0b25033e6ebca836439e79e26b4b26c2
SHA1

d318fddfd816764a2fb977e1be74c0a5f90f6d7b
SHA256

0d9b8ef4f22296e5349cc1de0e4f6caff58b11f94696520bafb6c4f06df9c72b
SHA512

e44e89beb28ad2d47cc657582c9ab576c0754dccceaff3c5aa1cd664b12a7c34065a25a0f0ee626a882fd308b5240165f4eadcc0c7a722fe6bf401a07edae382
SSDEEP

12288:d3fLH/6SiaGRzmJlDFGte0UvorigeEerUC0XSxnD:dPbSS3D8WAr1eEtY

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1212 AcroRd32.exe
1212 AcroRd32.exe
1212 AcroRd32.exe
1212 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\CUSTOMER-CORNER-BENL.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1212

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
fb452ebe88411c718dcc404e7b51887d

SHA1
e0a6c5251fe3e75ac7de63a93225266e8ae7c9dd

SHA256
dd852c3d394c58dc58461a917dcce471b98a6e60f582e6b86b2577f53ac05612

SHA512
ce28a21bef4d3f5e088d7d798ec25c81d0d5a7e53b3f17a82b94db99e701b4ec8eefb452e98c57a627687d2f898a3af4bc3845cf77334956f40ceabf4ff5522f

Download Submit