Analysis
-
max time kernel
150s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
19-07-2023 02:30
General
-
Target
IVCA - MED NOBO Request Form 7-18.pdf
-
Size
370KB
-
MD5
5e3fa0ef062e85fd83ee9671f3a4a908
-
SHA1
9fb92d4429a730b14d70e6753e8d927f0ebd7497
-
SHA256
dd1b6521a2f1bfafd271ff400d5fe5699ee4a415b1a1a12a40748bbc79a5df24
-
SHA512
c877315dd41ee93b8f9ea4a070e29f3410d3aac671ec7577cc302371b05835e348d453e27e5a1166153e7375be62e45ea0a48e0dcb9aa13ee4e075ac4dff9a74
-
SSDEEP
6144:FLrF4hQVHMpnOkZTJKKTVG4q1dQOQJqIq0V6iOfy5w42BI9OCQ5WgU:hrF42VHMpzTJZRG4Rj4B0V6Gw42BdX5w
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\IVCA - MED NOBO Request Form 7-18.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ca4ea33c00e9c002c6bf9cbdb910d83b
SHA1d53942b50813861b69b11e5960db582fe0d831b8
SHA2567cfba087dfdb8c980833d985e1af937c29c5b4bde1771664bafca0adf90b4b36
SHA512e8a614eef4cb9a1d2d1fc80b62d6baf59e606f179227ec4345dbf0dafdc361bc388580bbf783b00d3d0b831b4959a6571449609515a8296cf794add2d25437b5