Analysis

  • max time kernel
    150s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231025-en
  • resource tags

    arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2023, 14:38

General

  • Target

    afuwin32/AMI_Aptio_AFU_User_Guide_NDA.pdf

  • Size

    238KB

  • MD5

    304d9db6280b1aa876305960806faa1f

  • SHA1

    18ba5bc712c6479b96b5ed1ab5248eaa98b4f4da

  • SHA256

    892c23355319f043324519337ffd81ae6c4556d7b2d36c43bcf78c57f54b8a45

  • SHA512

    ada29c8ca19fe73cffb41ed627ca021e5c9c7779e9f1bdf0b624571ef2ac6e72c4764a4005d06c528a377c2017131d98c0db200f92e66964829dcd8359542731

  • SSDEEP

    3072:QXojt5zzCJ6dm/vRGGa42OfKwxHUXxFbcCzngiXeyKbyWyksIa+:Q0t4Jh+4Hf7AxFQSngiXeysyWO+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\afuwin32\AMI_Aptio_AFU_User_Guide_NDA.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5af6ca65f45f0777707ee1bd853124d4

    SHA1

    bf174f94b790b0a3e21a48e7c4987fd68dfc45be

    SHA256

    7b2131cdb790ab925e493452f776c88978fc1ebefc3721b8e7e42679a7634722

    SHA512

    50bd349688709c4197c1468ae3c748f71f5574285552b935f0850818afd6da57c07a7f74fffe86e45f2513f40e396613e883996122d7ac1c1500b77e860dfdd5