Overview
overview
6Static
static
6FW_ Permit .eml
windows7-x64
5FW_ Permit .eml
windows10-2004-x64
3195 Christ...ed.pdf
windows7-x64
1195 Christ...ed.pdf
windows10-2004-x64
1195 Christ...96.pdf
windows7-x64
1195 Christ...96.pdf
windows10-2004-x64
1Plumbing P...76.pdf
windows7-x64
1Plumbing P...76.pdf
windows10-2004-x64
1Untitled a...88.txt
windows7-x64
1Untitled a...88.txt
windows10-2004-x64
1Untitled a...91.txt
windows7-x64
1Untitled a...91.txt
windows10-2004-x64
1Untitled a...94.txt
windows7-x64
1Untitled a...94.txt
windows10-2004-x64
1YellowInsp...21.pdf
windows7-x64
1YellowInsp...21.pdf
windows10-2004-x64
1email-html-1.html
windows7-x64
1email-html-1.html
windows10-2004-x64
1Analysis
-
max time kernel
151s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
24-07-2023 02:27
Behavioral task
behavioral1
Sample
FW_ Permit .eml
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
FW_ Permit .eml
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
195 Christina St N - DWGS REviewed Approved.pdf
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
195 Christina St N - DWGS REviewed Approved.pdf
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
195 Christina St N - PERMIT 2023-00196.pdf
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
195 Christina St N - PERMIT 2023-00196.pdf
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
Plumbing Permit 44176.pdf
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
Plumbing Permit 44176.pdf
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
Untitled attachment 00288.txt
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
Untitled attachment 00288.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
Untitled attachment 00291.txt
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
Untitled attachment 00291.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
Untitled attachment 00294.txt
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
Untitled attachment 00294.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
YellowInspectionList K21.pdf
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
YellowInspectionList K21.pdf
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
email-html-1.html
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
email-html-1.html
Resource
win10v2004-20230703-en
General
-
Target
195 Christina St N - DWGS REviewed Approved.pdf
-
Size
11.9MB
-
MD5
af83b4fb2de4fbc5cbb985a257f91529
-
SHA1
be38311b644f2ae0f1c2693d4a8a5016e9553849
-
SHA256
29a18d5faa180b1ef78584581bcff59817f9d9137c41ed739f98655d21c7865c
-
SHA512
81edc765ca62cd93c9599839f84e52fd6113821a494cfd0e6f462305cef46e862515be186599695e97c4d4bf4a019267cc807e75376d1e9ea6b58d70872dc5f6
-
SSDEEP
196608:sgsZBm7O9tbOemE7Dm7crmJDlemDKtrLRPoaKB491eJ+PBeHCvaIZzPS3WCP7nzl:sgs/4OtrlAaKB49E+2CvaIZLQznk2J
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1036 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 1036 AcroRd32.exe 1036 AcroRd32.exe 1036 AcroRd32.exe 1036 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\195 Christina St N - DWGS REviewed Approved.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1036
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD586c86739947c5115f696eb0942a9bf35
SHA1831d5dc50037b44df7f991a32a19d46414659fa3
SHA256e4382e3de8299431cd8d1a6ec36a38f2950d0a70857afb1b9ec92fabc6a8fb37
SHA51291e5f95836363b4d6a603ea99d255e15c573ea644c3313995ab274a584ab8e7c4b127e6f4d699836892574abe2ef40964d09fc70b18f81e78bd821bc292915a3