Overview

overview

3

Static

static

3

MHIESP - M...11.pdf

windows7-x64

1

MHIESP - M...11.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    30s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    11-01-2023 09:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    MHIESP - MUSNIC_COLASI ROMMELMR - JAN 11.pdf

  • Size

    64KB

  • MD5

    83ca1ff284ba82f236e59bd37659fae2

  • SHA1

    67204ec719528afd7a7b08a30c2ed4fa275ed394

  • SHA256

    66f75661046882263532238c12aeffd119b0770eb02c8be970fda8c2702c70bd

  • SHA512

    858754175dd9b99d4984da83dab36b6181a8b6c33cf20e4251c382c45281ed4fdeb70c4f2c26e0c3655f1da406595e5ce9b88a5c93214684c2bcc95be306be41

  • SSDEEP

    768:fpLQ4iXADs5r8j/hQnct9qPG1uo7jHSbexvW9Xwhcwemwr1+RLyKhSOILHI1gQfg:BKXA4N8j3tUPGF7jnNm+5xhS1Agz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MHIESP - MUSNIC_COLASI ROMMELMR - JAN 11.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1796-54-0x00000000761E1000-0x00000000761E3000-memory.dmp

    Filesize

    8KB

    Download