Analysis

  • max time kernel
    193s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2023, 14:31

General

  • Target

    sox-14.4.2/sox.pdf

  • Size

    318KB

  • MD5

    281bfbc84f131aea46f7a527724e0f21

  • SHA1

    4f735203facb4069ac8886e6fa0e46b33cb59e6f

  • SHA256

    002c30bced27f5276115a5aa59b0a077e7942894cd2562e8d879941d950c246f

  • SHA512

    f77971ae4251c77725b7853d619b3369210742c1c269d80062e26ff48c84785de0ca76bf4d341042b2b785262fbe432c80f14d079d7109d9dc62b10f15a382c3

  • SSDEEP

    6144:Fa6vSE3yVU1bJB5khk6A4cP7EbXnsIaS2S2jUev10JH5kOl6K5UilElXntuC5O:86qu1bJXkSL1UXnsdSx010JZk6t+hXnW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\sox-14.4.2\sox.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    799cb158d17d22a67f55a5a5cdeb12b3

    SHA1

    88eb88b5e76faeaaa2009e728312e7277549e745

    SHA256

    43ed55f363afa72390fb55f249091a7badc804f61345d057de376f53e5e6ad03

    SHA512

    908cfe7ce16d66d8175fc1683ab7cc22cc55f83117330d990fa4f7b3c89d4be05ed42f079476f204b4bb85ed6867425e49cf6161b121a03c72ebcd291150940d