65bd9a0d0ead2e9157534ba0a2f51444a9103e7da585efc7775d537ed7223fef | Triage

Analysis

max time kernel
43s
max time network
18s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11/01/2024, 11:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

DOC-20231220-WA0011.pdf
Size

79KB
MD5

5e92490d8ea01f13e62b52267ad78ea1
SHA1

04eff6c32e0fdadb6d2e350302a7cf8bc85d1f23
SHA256

cca04d6141c48ce7423e854aa35713debf55eb1789d2180dbcd848dd8401b452
SHA512

e71c281136ce267019102281b88f9bb2bb2c0a30962a1f2e2e9543c38f369077bfd6628269e598b4d6325fafe14d2261d7827e1b0870ac2f79ea25b449731b41
SSDEEP

1536:Kbf2I65uEgqWSWcgbRGAgAYU7qlCF0LTttfwlvTpmV62181:0nmPwGAoeqltTtlw5TpmV6k6

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2332	AcroRd32.exe
2332	AcroRd32.exe
2332	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DOC-20231220-WA0011.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c6eff0d3dd3381ff974db224b20f46f9

SHA1
fa37ed86b93da75c12e697ffef83e672c75532bc

SHA256
8aacce23e63a8ab8f2f8c8c6026df3fd22cad4168db99d9a29e5bae37adf8f14

SHA512
a337eca7d980811ea82b3fd6cda1fd8f321faae30fd164e428fb66857cbbed5dca8da1b5a7de5dfc10eb61458b1f5cab1ecb91cb08ceaa317a4faab28f982600

Download Submit