12ff63af0a27200b512b2fb73d0086cae611b557b4eeb3fb5b630cac9607fb7d | Triage

Analysis

max time kernel
26s
max time network
19s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12-04-2024 01:49

Sharing

Report Analysis Logs

General

Target

TAX DOCUMENTS 2/1099-MISC.pdf
Size

102.1MB
MD5

db0521bd7e4b9fc803f9a900212eea02
SHA1

6c86b49b4c1e3ebcecd5376166bfe3bda6a141fa
SHA256

e95ce4146e3ffe7d5fde36340c01889f7634d6f91b92fbae1606bef9cb4a7cfb
SHA512

22d219dac43bd3200e666ef7e554584b0fd43c57c0a6dd7888dc80f71a9b5e73ba48400607205a4f1680af0ccaa197fdb1add05fc7f698e9246fe00a6a49080f
SSDEEP

3145728:96lH+byk0ZggBznCh2HCea5bQ92NmDVr9XqnZGWpg:M

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

3048 AcroRd32.exe
3048 AcroRd32.exe
3048 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\TAX DOCUMENTS 2\1099-MISC.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b159b851cfce74a0f38ae3dd597c09f1

SHA1
ec31e3c55c1aa2c08ff60f316629efccdb2049b2

SHA256
e7b9c6b51a0aac9ceb2712b3f48a6b44d169b497a397356464194290b617368f

SHA512
1496da5141679c9732fd4275c284fc33e940850688ec809f0c5bd889cc2424c120ecbb3c14953b61623530d8ba7427556640c665ae1d00e2d2eba52df9f33ce6

Download Submit