Analysis

  • max time kernel
    150s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    02/01/2023, 18:59

General

  • Target

    PTL Capital Inc. Tax Clearance Letter for Reinstatement Letter Comptroller TX.pdf

  • Size

    207KB

  • MD5

    2d5759be563a786b821a33da0ffa4064

  • SHA1

    101ef7badeb56ae28d88499215ce9ec067ce0139

  • SHA256

    ca725d6ad7d142f1d384cd9c6c4732730fcd4feb2fcb7d24217f7f91a2098d4e

  • SHA512

    27fd65a431e78a8f5083127bc193620c121df6954a13dcf11b5944bf9f974f58595073003c243e3bde4901640d617419356a157528077c201f85bebdcd09f785

  • SSDEEP

    6144:fKz3ykgYxCxNrJxnA4GnGS0FhekB/QbrlCQxcyHv:fKz3yk9xCxdJh1Gnx0FheIArlCQ6yP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\PTL Capital Inc. Tax Clearance Letter for Reinstatement Letter Comptroller TX.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1356

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1356-54-0x00000000760A1000-0x00000000760A3000-memory.dmp

          Filesize

          8KB