Analysis
-
max time kernel
167s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
11-10-2023 17:36
General
-
Target
TreePlan-Guide-179.pdf
-
Size
211KB
-
MD5
53bbb7d238f7cc3afe14a2f7a11ad4a3
-
SHA1
c585cefde33febe94d9f40fc09b28c654c9916c8
-
SHA256
7e157933a048da66906804c016a44b7225a09d0a866908d55d4fe9811075919e
-
SHA512
0d33f6ca3932c298e4e496a50cd09e5333e02140720682af8a0c2520eb3bccb8705c8a077479eab2f8ca8500d5716bbb88f679d049099d11ea3243802c9cb33e
-
SSDEEP
3072:TkxChG5B4dsFwiLXOaLIA4kj0bh/lJnWi/Dfna9SVrlWsNNU3WtCrn93U/JMmPq:TA5Be4Xbt4CePci/DfSi1HU31rn9WMsq
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\TreePlan-Guide-179.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5e70458a2cbd58e8bbde17ee201e398f7
SHA1012bf2b974a6d1f344e1b3fc665fd6be08c19abc
SHA2562e4c5e1609df0b1053c2064310825702db289df0690cf22f3e17b09f2f19b773
SHA5123dffb09f11296770e968d1f4a6d77f5c934160286db88cd709d8e8a56c45d0a020490e94a7107e01a778cddee04178cc2ebaab772347309b1bce3acb38cb2968