a17b4a83e36a02f22d64cff10a32ddfa4756ad44334fa72079f6a11342b71e1b | Triage

Analysis

max time kernel
41s
max time network
28s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12-04-2024 01:38

Sharing

Report Analysis Logs

General

Target

Maryann 2023 Tax Organizer/1099Misc.pdf
Size

130.0MB
MD5

f158d3387c6e2cb1b482f7b7abee7e20
SHA1

9aadedb8049339dd027a45bc733caa1f6f3dc7a9
SHA256

c052369f476b624913e8aec1a3ba729d30b5d5f145c4c5c58d64f7d09cfa54b5
SHA512

93e92533c93d966007eaf6fb35772e362326eb8bd321f1db28cfa98943277589a393081157a8832f162776127eb91974e3f93a2ea3475e936db1f228973bc40e
SSDEEP

3145728:96lH+byk0ZggBznCh2HCea5bQ92NmDVr9XqnZGWp:

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2708 AcroRd32.exe
2708 AcroRd32.exe
2708 AcroRd32.exe
2708 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Maryann 2023 Tax Organizer\1099Misc.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2708

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
624344fe5e281566c38aeec3eb00a37f

SHA1
d0c321a86590d1793aa128827fb8c9acd121b99f

SHA256
373dfeb61c0ebeec4f3e39ee16dd2b8eea170a7b96670460dacbde7ebe369931

SHA512
0701305883ec3164ef6d80ecd4ee77b9010ba00d7bfd9dc6e6d13cfcb80907f8b69138b3bfbddc66d8098038b8e62136839bfcfdb9f1cd16b0bda3ee858aca36

Download Submit