Overview

overview

1

Static

static

1

20230622_0...45.pdf

windows7-x64

1

20230622_0...45.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    123s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    21-07-2023 06:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    20230622_0133_S_Hageman_VENTILATOR_202306221445.pdf

  • Size

    171KB

  • MD5

    95ddb8f810ee45e21ce9590992248641

  • SHA1

    b1643d58050c67dcd82de39e6d4436aaf46b0ce4

  • SHA256

    f585a2893fbef0858f832155015f21ea13aedfc29995afa38285121b7f4b8049

  • SHA512

    605e53664654287e528248a888c1cb1823d4e140d5d218727647a2d3d0e402f6a6772547913c288618ec98db8ca522f764d3b2a8ec65da46d3facf09cdccf746

  • SSDEEP

    3072:LYGskkYLLLrOoY1UjUON+QIaF/eKTwiWoeSCWAwiVfNeKswxG2gKepEKwweptsnX:LYGskkYLLLrOoea4KsiWoeSCWpiVfNeZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\20230622_0133_S_Hageman_VENTILATOR_202306221445.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    4c44d2aebed83fa0170552702fb919d0

    SHA1

    34240318d03f4cec9bc0e3b0f7b8e23b14366815

    SHA256

    d335b7de39b5bbef8d9c557c92deaabb9683d1502f9e32b106d23849fc81c284

    SHA512

    cda01447fa2ce6d57e0f54f64d617d4bc9e52d6b61ebc648398bb5ad66708aa0e4d21075121f671f337a8fa80ce07cae6c145e2fac535c2a2b0e94675d5421c5

    Download Submit