3c2ef7401babd7fe4a621f8dde5ac228e91c89eb08cca67f082d5148ebc4585e | Triage

Analysis

max time kernel
64s
max time network
16s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
23-04-2024 05:28

Sharing

Report Analysis Logs

General

Target

1784.pdf
Size

104KB
MD5

6435ed31a9784db84e33855a578a1a0a
SHA1

d08ae3de542df7234f51cb63c1f89feeb7493c12
SHA256

3c2ef7401babd7fe4a621f8dde5ac228e91c89eb08cca67f082d5148ebc4585e
SHA512

5848af042441c39bfd0a7b78bb5971eaec673503b75f245553193419c6ff84750c9279a94cfb49b44a3b4bc365102fa827ef3a4f07ad82bfb2f37cd7fae611fc
SSDEEP

1536:+Pw9pvY9yOgLKLgzGywRwBcyTRMYELsvim2PLlUx7KH5jeS9pKYxdHfOLbFEy+Io:+Pwj4yO/gPnvOlUCKYxBsbk7

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1888 AcroRd32.exe
1888 AcroRd32.exe
1888 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1784.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1888

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
2d23d261b86f2764492ef63b9d0b1577

SHA1
4d6b3863b1c3c171f538e645c68b98f92c711aa0

SHA256
14e523cb53e6838ce2f85f492135d9eba6e81065f22deeed59a1c4e80043711b

SHA512
370c7492c157412984dcef55e07c8d80bfe9d97a23ae8f652cf2c79e71b24b638eefb1fc1598c7d65a4a7471e09b491f3ad8eab4e23651ad7b11478b1ba14137

Download Submit