Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 15:24

General

  • Target

    Invoice #337554.pdf

  • Size

    26KB

  • MD5

    035d201f5fddd1c3795bd39a4f79614d

  • SHA1

    3e70559aa35e3ac1296b7d85efc57cd8e7ef0e43

  • SHA256

    1d87aab3be55f3c2e614ca8a41bc2a55225e86fe3a4b9934e890b34837946782

  • SHA512

    5e3251da16b7201de2e1b7dfb69f68d916a19bffe6fb07fa19d3d4a8adc513f066bd66566b37e545648712f37848fd0bcf376cd67f11cfdf430918f666c1e65e

  • SSDEEP

    384:kukBNEwiGKIpdDQHsHMJKAotoSLrQYKFUU/B+YAzwFfaiCHHs4/TOI43ZD/GHMe7:kNEwjdmWrrG+YGwpaiW2ISLk

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Invoice #337554.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    bec68d8b3bf2cabaa97f120f8b4d4ef9

    SHA1

    4afa031c26d8468a5097d26c3dc336f1df78530a

    SHA256

    7afda89c869325dbe1252c3d0415393f8b31441342081e71bc7ea3c671fe22b8

    SHA512

    e95d70cf0c24320908ae623375dfbfa4c130e514ab8e3405e54736daa238b942894ce722c28e2b287322dd7d2d2388f052d2aa30096f907731bb6e9428764e2d