Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2023, 16:38

General

  • Target

    tina__delancey_shared_nya_health_services_with_you_Hs4PpMxW.pdf

  • Size

    37KB

  • MD5

    b864b6731eb03c3bc2f5834a21290c04

  • SHA1

    4dd8413117425563af444f904388d3e83b2ba66b

  • SHA256

    f69b7f3f275b1c1c3056d53017b84a7c3d0ee1e3986667ca1cf11390927a4e9e

  • SHA512

    09b8db6299c3faf520a5017a0caafc416f386ab2c8d475256265b6a98c5d9033b33f085c5d7223886e618e8bc1cdc66fbc4a7a716cf7778d4aa18942a83c549b

  • SSDEEP

    768:QH0qm69HsVmoLWbOzpBGAITSiWMsB7ik+cjaJa7NgngbEeAkk582H+dV2:QH0qmKHwmoLZBGAySWC7ik0a6gbED8ZM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\tina__delancey_shared_nya_health_services_with_you_Hs4PpMxW.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1712

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          062449cd9c8ac384a17b581fe7117d50

          SHA1

          3367fa6417abf8f86fe80784a0025595654ddd31

          SHA256

          8c6896ae67f2e06844597cdcd54d6020246c5b1c6b3604cdee1728b3227abaa6

          SHA512

          d9f529b2080675b879ba564f7bb67f679a166ed84272c26dc6f4a50cad3ea7a0d2b8b2ddb9d290af2d287fcebe38694c1b8f4769d5a09062dffde48046430874