90edd219175124553e715e91432a1e3f0167c4fb03e6f1da1bc686d166518127 | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231025-es
resource tags

arch:x64arch:x86image:win7-20231025-eslocale:es-esos:windows7-x64systemwindows
submitted
15/11/2023, 14:49

Sharing

Report Analysis Logs

General

Target

Product List Food Supplement.pdf
Size

37KB
MD5

0e9c67e816f6fc6aba5e300be6541bc8
SHA1

10a854be1f74a81feb8a2aef079d414d5ab442ff
SHA256

90edd219175124553e715e91432a1e3f0167c4fb03e6f1da1bc686d166518127
SHA512

b2e71283fcb875ffe3463b7b3742a6f2e50c11bbc7f817a1f465eb833051006ec8d4fb9d3473eca27a2c3ed7dbe6401713638d4ee4b5d2521e4304f4c7f7c8bc
SSDEEP

768:lzfCjnrebnNXYAgMAAQQzbaXVNCmH4oodb5dW3:anrebxvg/IylNCCHsg

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1724	AcroRd32.exe
1724	AcroRd32.exe
1724	AcroRd32.exe
1724	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Product List Food Supplement.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f96238cf0235d83233d22302994944a2

SHA1
90db0f6cacbab1545c37586cb30a7b0a3c991fb0

SHA256
727cb2ac610025bf38e98b42f3b20f02a93fdca46bfb5f666b5b0f089a338524

SHA512
f03b4dfaa10cefb4f96800c1991e82e842e6cbca50d8321924c06f4193d809fcdbb1a4ddc6f170a16012b53849c3ebfd6b9d52e877578490253967dcb049d51f

Download Submit