Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
15-08-2023 18:42
General
-
Target
whirlpool/B/Whirlpool.pdf
-
Size
252KB
-
MD5
65f37cb455168cfacfb892963afb9abd
-
SHA1
056e05961fd09dcba8e335514da198ef96307e81
-
SHA256
8cd3344150b76f5353ef53b5cddbe2de91252450647a1079aa97439ac821b97c
-
SHA512
89c3eea0fc03c84ed584f72b99605760cacb6f184edabb5f38dceeafcaa48949a233dd6e808d69f89ff7165b0e8b42a3d974cc660a966c430537c549eb80c50b
-
SSDEEP
3072:7tabumKxrGaSiI0KbjxRwCxcnIRGWYpJuya3naxtHLVD0F0lJevRY47ENz:QuBSi69RxcnqGTmxa3HS2JIRNENz
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\whirlpool\B\Whirlpool.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5edc638c7b1c94838695cccb482e3a724
SHA1109c2bbeaeb85753689e8e132578e70ff9e5e749
SHA256f72860b7af6e2d1ce48a1caa10be3bc3bd6e010dc79d614e8c6ee6c76aaca16a
SHA5120a7ed8a3430f453a8a8728a59241c1f37b722c05d2e53af2d3ce6f6411b16ac6f760390cb33c9a8348a8330db3d5a7a8e21c95eed4748dad6a73bfa4a7e786fc