Resubmissions

22/10/2023, 04:52

231022-fhrr7adc5v 3

22/10/2023, 04:46

231022-fd47qadc4z 3

Analysis

  • max time kernel
    214s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    22/10/2023, 04:46

General

  • Target

    Battle_for_the_Soul_of_Capitalism__Unilever_and_the_Kraft_Heinz_Takeover_Bid__A_ (1).pdf

  • Size

    861KB

  • MD5

    742627e3314e4b0653d55b7b3507036d

  • SHA1

    8c5d96227b350fd8129309d8c5494711da5dec4a

  • SHA256

    d3e0fd7c1ff117c56db3c22e388c55438cfabddff2ea5a55581246a89fdd4219

  • SHA512

    d9e0d52797aa9050b19396c3f01fcf59668cc4abb34df936cbd1d34ee4b533d03371b176f6fc9df35370aaa718d908d780c46541b4695865d224e8e110dab717

  • SSDEEP

    12288:E1OeOVzL3e9ETdGlcUoqmtbk4SRriwWdabFXgAcsOsvFXcduH7hrJjmfzvfGA3sv:7n3e9EpXUoqAIuwpuyX+KFrJ0f8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Battle_for_the_Soul_of_Capitalism__Unilever_and_the_Kraft_Heinz_Takeover_Bid__A_ (1).pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    889e055b0c056e57791a0b31c1aea217

    SHA1

    bfc8e902611dfbeede69dfb368351bf7a82a94c6

    SHA256

    a86e4282e47188133c799aaff1c816445f8bf6470f04690d30e4d43ead9ca340

    SHA512

    9b58d06b6cd3bd5d8deac334e86e361a8e4bb683c469c43e9b005f0c85ea741c5d71bc747313e270ab5d2f6870af3c17ee97819916946f7b97ea5efe6067ad3a