Analysis

  • max time kernel
    144s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    19-10-2022 22:21

General

  • Target

    4115-IOM-A-2021-03-26-1.pdf

  • Size

    4.4MB

  • MD5

    f517dc3bebcd742cc81574228bb80415

  • SHA1

    a4d45d9cbee820785fb0be50de5c5ca37fa0c9ca

  • SHA256

    98b91c431e7b568baa96649736e56958c994d78f7dbe34a99ee8735ddf00a822

  • SHA512

    3c7c608f88dae7211e71180acfd59f9219790af1b7a7fa97ef4a15394b424a4290df1903a84144e705680af1441e2c55061a0f64947f64ea1ed600fd10a4b85c

  • SSDEEP

    98304:LYv0IvFJd8mXU4AeLVVjGDsnuP3GLEMMsO0vqHSBvO9cYigFZsrR9+6ri:LY5FX7jASX1uPaE7sO0vqUPYNZsji

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4115-IOM-A-2021-03-26-1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/832-54-0x0000000076BA1000-0x0000000076BA3000-memory.dmp
    Filesize

    8KB