Analysis

  • max time kernel
    21s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 16:40

General

  • Target

    Bill925186997.pdf

  • Size

    46KB

  • MD5

    d5f5eca273f69340e7339cd0ea31ed54

  • SHA1

    45af76d0188c34fe36af5ad9c436bab46015a2ae

  • SHA256

    eea2acd7c385f5fef4325552da8d5bf5e2631e461202c25295a7ba39ea90fc84

  • SHA512

    bf659d083ce9d7040c4ca8242a3ec6b7a1ac68af7be9511fbf5e702039c68ccad04996c93a7f2512c4e03059a9e694553741d8c163f15b6b3bf4e60db75e8a05

  • SSDEEP

    768:pTjQSOsSqzNh8u6P3y8ECPwM5ZJAa4NFXZcXyC+Ic/sObWvAk7x/C7y:pTjDSEH6P3vwMd/47XgyC+V/9q7w7y

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Bill925186997.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1044

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          82722a99e7de60255a627ba4dcdd9c59

          SHA1

          a4cf1c9971dbe0cf58630b1cb97d2714468918cd

          SHA256

          7953346bb59d74e4c94272bea68379df0f568e2b5771b0e06ccb46b5362d1c09

          SHA512

          d06fbc7bf5737f360ff989c7ec1c828a9de5487bdd01920c42cda171878e4b62d53dded2e5a9a51eeabd8a531b1e32c78d2d09f704962f3b1ffbfbd8285175db