dbe8b2ff2374d351e08305dfcdc1f09cffcd46ba429d44209ab57f5654b9d2fa | Triage

Analysis

max time kernel
19s
max time network
18s
platform
windows7_x64
resource
win7-20231025-en
resource tags

arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
submitted
21/11/2023, 16:42

Sharing

Report Analysis Logs

General

Target

Scanned_Copy_029194000.pdf
Size

44KB
MD5

d4320fd119fcecdde8b440ce2b5f3649
SHA1

02231efb7954ea2cea48b4de19bac5e38cc32571
SHA256

dbe8b2ff2374d351e08305dfcdc1f09cffcd46ba429d44209ab57f5654b9d2fa
SHA512

ec4f005f5e0220f7f4398230fcb114a1bf81f0d8e22d24aa392f1e24bf73e3076eeee4358ab3bc80a6ac559a31045bcb8f3cccb3365ea6a8faf7a8f27f99bc36
SSDEEP

768:1lLETkvuVRZb99X6NXDrek8DqvJrCa6laL:7wdz99KNXDCk8DqvJrB6laL

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
2472	AcroRd32.exe
2472	AcroRd32.exe
2472	AcroRd32.exe
2472	AcroRd32.exe
2472	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Scanned_Copy_029194000.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2472

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ae4582ac9c81e0d7f6aea969816cec98

SHA1
44d834fabed818305e83233537e64f6841aa9f89

SHA256
ff276cf5bd50ffd2289487693b5589e71b02cadde23ed39358f7c40025735d82

SHA512
b39f22b25836bdb83ed8699c9c2382421ec8163373bbfe57e2b013df0e1eeb7afa191f3280c5228c43348c8f49f48de142202889cc4795576f717a46ce092067

Download Submit