3d087b40ff47e010c9da0c96d225e46d68a26661062247ee7f0655b677724531 | Triage

Analysis

max time kernel
17s
max time network
18s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
08/01/2024, 14:07

Sharing

Report Analysis Logs

General

Target

content_license_agreement.pdf
Size

255KB
MD5

51cfcb0d68adab6f657a8f2593617e71
SHA1

5c07d4ae694af14da871b025e9148a4a53e251f1
SHA256

3d087b40ff47e010c9da0c96d225e46d68a26661062247ee7f0655b677724531
SHA512

efe13c7e42fb5dc6aee5bf81cadcb24acbe42a277003489f3c3ead900b5d46cdb57145b5c49f24af1b61182156393afc12509d1f084ff476efaef63f1d187cdf
SSDEEP

6144:r10h1aBcQgTEr7I86Zt+43ByrxQN5KJ6/gRGtyGGFB:r10hsCfEr7IXT+gfUJ6oIYz

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2644	AcroRd32.exe
2644	AcroRd32.exe
2644	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\content_license_agreement.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
415642492b550d14e3a1fb2fd370d8cc

SHA1
efa0779ec250de9468841ca8826dbd766052ae0b

SHA256
d4bec7e228579537d3f764f7ae31fef52be9be850bb654c32b13f5dd7a111002

SHA512
1e94c28b8817099e5b5994f62bea104ae0f8b6bf4a10d46f422c42eea9e7fad0ef614a3321f1ac98169bddaaa75a689d1016c148145f6f583d0760b8948f43fb

Download Submit