Analysis

  • max time kernel
    150s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2023, 08:06

General

  • Target

    [KB8544] Bulk Distribution cross your company.pdf

  • Size

    100KB

  • MD5

    771cdb2939dd13dd636d27ba85b1fc84

  • SHA1

    891849c0ab7f4df8bab25e2bef0ca3b3c7d9e01e

  • SHA256

    39b281f23759efbf2d299f518dfc68f3171026e128e5bd3379ea95082a7b9605

  • SHA512

    942693b91c79789d8ac6df7e10e4d9dadce175b1f92e0f8f4f16d2fb76d0a176c3a4f06ef58a56d4b51a16dd77e8d01cb152667c25f73732bda23b301a8a3470

  • SSDEEP

    1536:NXl++czPTGNsEv4fgEsZz2tGrdI76dMZgUFFCQIbNKgyabedogArE+:1lPMPesdgZZdQvFFWeddEZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\[KB8544] Bulk Distribution cross your company.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1416-54-0x0000000075F01000-0x0000000075F03000-memory.dmp

    Filesize

    8KB