Analysis

  • max time kernel
    181s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2023, 13:42

General

  • Target

    peoplescare/file/resume/a07f355e0977fd91c16394c4a042f08d.pdf

  • Size

    31KB

  • MD5

    54766394dfafd086f04f906a22c18313

  • SHA1

    15f568233f7eb8b7d3495ead9cf614e50ca49f06

  • SHA256

    00cc4f19465f82ae1f07017a38534783b6bb83950ec12c4341b0afa7516634de

  • SHA512

    6e3b36c01439e6ba9b2de46b1a4fcec1a87a5721dafb6c6e3f62fed12d1f4d7141a301e12adf88e020479c13a5f6e2338d86284ad7fdf08242a5060f8cfebd25

  • SSDEEP

    768:P84X1gEdNDHiJ1A/MlaRwbkclu72Nk25/5TFUvuaHvJUdZXywMCBYKL:k4X13pH4uEUObkSNk+6WdxHM8L

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\peoplescare\file\resume\a07f355e0977fd91c16394c4a042f08d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2192

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c12007d247347af9d6cde3f5a9bfe41c

          SHA1

          c34b7d17e1eded1f462572312a73318156271fc1

          SHA256

          5c020a1f41504e73c5883fd10889a82e113874689b73f7fad25135c7a27ec8ed

          SHA512

          5ce5b2103ba4413157040dc3f28af265a8ac6781d69f3a0ba823628122772e5cd1c8dc31d01c719598ae0e60c01094a951f2e7a6b53575507bbf6d567b85b667