Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
19/07/2023, 02:30
General
-
Target
IVCA- SAY NOBO Request Form 7-18.pdf
-
Size
95KB
-
MD5
20e5c9df6033354bec767a07a4a45b20
-
SHA1
7c38285a29303b15f114f1a5784bba5d8b945178
-
SHA256
409b225d4618b6f3860eb47dd46d6b716fa6d6539e900ece47fd2d0b991c1a58
-
SHA512
e9a4c7c951da42044548b9a4c2dc320e48471c5f3e6de70814ab824a7554910c79b4aa9063f2ec731950162c2839dee82df8f70410f2ff5bda7cf90f8a11a7ee
-
SSDEEP
1536:Zv8UhpP64KAu4A72JurgeaQ/BfojU2SYei5VZcRfj2eP9kic1Xt/2viK44Jj:BpPtZu4CquFaQ/NojU2dVyrqiuOaKxj
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\IVCA- SAY NOBO Request Form 7-18.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD527f60e11bc6e4cd0a07cf9e41af43028
SHA1c5887e568a278cbaa22706dc90129cbd309a5b02
SHA25666b35799060f53c0d4cee865a604ad2f3d41792f4b18ba9c08e1f1ecd623e8d5
SHA512d488ac694c2090af9d17c768bc6bb96251f39d395fa22e9f5105d77226e16b27a93b233493ccbc0704331bea415d82d977392ccd0dccdea982f17d8e59e519fe