Analysis

  • max time kernel
    151s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    16-10-2023 12:36

General

  • Target

    Specifications/Cement BU - Denim specification.pdf

  • Size

    439KB

  • MD5

    b34f77aab888f7d210b2aa068f2241bc

  • SHA1

    05c86d47f2b15e4406d09372d298413a5820f00e

  • SHA256

    40d813bc2512657293bd4bfa73ed726b4a83c9200225d5b77fa41b9e76089593

  • SHA512

    b3233a78cffb0a49ad0cf101a7b9c80f5c367e77b4b80226098dea872e74d46f1dec0138da3bcab167bc4c1d3ad43f99b2bd94d090eb94025a6e5e131d15b06f

  • SSDEEP

    12288:ngBnBu+8UjdjnKgEj3J1eK8UBSQZcGVzz1zoUy0:CnBdjnKh3J1P8iSQZr5zry0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Specifications\Cement BU - Denim specification.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3a9b3c1eead543c9a4be9628991c6431

    SHA1

    4c9d19c27f1c23ed094c19e27285cc5f80ac58de

    SHA256

    0513693bda8b6a4d61b61e01541889e6b04618e62f14a903a66242d866d6a087

    SHA512

    4d05bf0fe24955c8c9de98af572f9b5129a86fc25a910b5ec7a25fe691db7f7c1ca01e0e51ff0d065271db505dc730b57f8aedb3e3bdd19fb7cec911cd4a982b