Analysis
-
max time kernel
150s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
13-09-2023 02:23
General
-
Target
W9.pdf
-
Size
129KB
-
MD5
a73738d335ef3abb155cc9dafbebdf57
-
SHA1
71ee45828ff690bbfcdbd9b35aea58d48d9e8594
-
SHA256
78366390cd4e3db89e06009fce54df272bee0d3b34003f3a786c4835239bfdff
-
SHA512
d651b898350767d8a81b7fc65181dfdbe1a1f17bd77ba9c708d753470702c596851ea4557bd4d9065ecce64bab0b7b433ccf1b8e77f5ffaf2e82c70c9a48c6ce
-
SSDEEP
3072:UVilYC32TlkA8VxiQNgAROHMQSJSFhasszU:Ur78DiQGARONGo
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\W9.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5KB
MD54618312ec50b52c81043bb6ff393cfc3
SHA180537497d939529b34de993b14d96510068bf075
SHA256e8e27396e2a043abd283eed4fd5b8fa256cc22e741defd522158fc9e29205839
SHA512fc589a974f35ee83c297784c7d7cc62826854422ceec2d5ff46aa6575f5b2bade27d26c1dfc0686602c81e5c14f75f7abd23e6c19fd90a2dbe70e0f5c09251e9
-
Filesize
3KB
MD5b50da392b5059701c6129e2a4b836194
SHA1985d9e7db1a15d84e04a8064b84409d462064fd9
SHA256b2301c1003a66e7ad8f176e07aea58a000333417ba940a088394df69552ae918
SHA5120fc7d4506fc0cd823ececcf505d1bc231cdf36105da7a72f6fab0eff05e696bbd56862ba56e666e93714601d50b8bc3577b4eba90fe3d8460c256e056d80ca78
-
Filesize
472KB