Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14-06-2024 14:10

General

  • Target

    Invoice INV-MK78167.pdf

  • Size

    46KB

  • MD5

    8b346f02063da3731531986b690a56dd

  • SHA1

    200437d9d9eff9e38e65ae0396c9112128b3738d

  • SHA256

    836660901c0740a2f3ff0573b402a03788f9cb5f671e3cffd19ed98932259714

  • SHA512

    ed80d583f28f32c8dccaa87f10f9a178fdf296881e3fed9a9a1e4018ccb3d0374c5241f94ce1ed1ca340afcee60c078e1e9f4359566aa9385bbeab9395f1455e

  • SSDEEP

    768:zCfy2dTvAa2z0VfDk5LK4gMfnRCIxBt0yOOv/eK4IhgkCRGIwxCDdbjv/m7R78bl:whWG4gMzd09s/VgkwR5J3v/zlt9X

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Invoice INV-MK78167.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3665a7f9ad064ad2882431ccbee1f1ba

    SHA1

    26f6b6f4b2e0270c9f28dea64032a3ad38058b61

    SHA256

    b75f5d06ea953a0518b65c0e1c9ea7cfe76c749e7a1f992b4ce51184858c2fb2

    SHA512

    922335104931388d7534cf4ca0b7401e4f7da61471528c8f3705e4f452afe5c0a33c6f96eb37b9bf98b870238fb2b7b0a72767b0cf29671bc188c38e7481846c