60d6d2b2032b6e9893f15b1cfac3be3d7c1e9d39873addccb070c24ac009c2ae

Analysis

max time kernel
43s
max time network
20s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
29/08/2024, 11:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ijhjih.pdf
Size

149KB
MD5

671f6b1c8b3d9cc0a337d63aaa0736e7
SHA1

33e9af6ed0bcba57a0df6198dce0d53410740042
SHA256

60d6d2b2032b6e9893f15b1cfac3be3d7c1e9d39873addccb070c24ac009c2ae
SHA512

93c310343bc29f9fcf9350987096ea1d1a7c77c40e5e6b0e67b091682e9963d47ece57e94ccbc698c264e920ecb72f6f640a2a495ae8421b8e36f6935773ffcc
SSDEEP

3072:9Jp/QzgaPJ2FHnf4WrVvlB+zcX7VlyNBpW+55/dPuwC/4vc2FYPXrhDk:laJ2FHwW/B+z6VczpJbur/Qc2FA1A

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1900	AcroRd32.exe
1900	AcroRd32.exe
1900	AcroRd32.exe
1900	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ijhjih.pdf"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1900

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
34a407f8ca77046c984810be78acd899

SHA1
a0b81ef16383bf58e4c2dbfeb8573fbc4e0c47e7

SHA256
fa84f8531972bc19b8848e09f5f30c536400feb2b0e96d58a4573e72ea071a43

SHA512
29e13643535c61906855344e3e4fc8293513613f945836b0f0b31a1e6e944f93161f9c844e26a920e3131b99e9713bbc1aa72640d4a96476477ef65c96a66570

Download Submit