779987a900c6a37d2f8e009aaef0e181c43093743bab424b32025ef8481cbce4 | Triage

Resubmissions

11/10/2023, 08:49

231011-kqzvzscc5x 4

11/10/2023, 08:43

231011-km1m4seb28 4

Analysis

max time kernel
42s
max time network
14s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11/10/2023, 08:43

Sharing

Report Analysis Logs

General

Target

offizielle Bestätigung.pdf
Size

868KB
MD5

02925460176849ff75efb3f8064c7fbe
SHA1

f14e93f9e9922c57a772228e7cf8d18d890dbc8e
SHA256

5136b97a5c734c4fe26ab6672f7de0600442cf2397cf39f250f1543a1087b887
SHA512

d87965ef56854065d0c4a40e52f7125b30b0c97a3eda0b20597cfa44551b21143136cc945a417157c8b62e33bd70f187c8da5cae23c2a6c39c6d8885f6346316
SSDEEP

24576:rWV5I7ANzOLA26HjLBjRZwxI+PlS6qpb2ApKi:2xOLZ6HHBFqxI+RApKi

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2700	AcroRd32.exe
2700	AcroRd32.exe
2700	AcroRd32.exe
2700	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\offizielle Bestätigung.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1cc9ec6f0fda0f3c8569ccfb45dc77bf

SHA1
a3dc36a45992d6630a2a0c2c9c0b8e6cc98220a1

SHA256
458417b8395e2f4e80963225ddcb70f2ff67ca43db8535f837f2efe1fc636cee

SHA512
3245aa893d58519c0f5f80393e700b4f351fc2afd8fc7b5bdf6fd54f9d0f96cd313e152e2bb05ffb1f9473945acc478f0c0551dde4a670e5a1d70228df689746

Download Submit