Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
29-12-2023 18:05
General
-
Target
VisualLocalize_Software_Maintenance_and Support_Agreement.pdf
-
Size
144KB
-
MD5
246ef29594fc3a5d2df1f45a27713820
-
SHA1
3c82a9d7f4e38d1ae55d09c1868be29f051c942c
-
SHA256
4ea9d512b390cb4eeafde4a742b082660d7e126ac0ea0ce30cb21978b059cff8
-
SHA512
49d1bd59859931c7c0a29f68ca77d4ff9dbab7c9ed86ece0c8b5d37707f3675846b41ca3cf92acf4bce0fc5342d39eaf1f778722c4486f6fdc62bf8604c0f3f6
-
SSDEEP
3072:gXiSymqrK586klRq3ltKJAfJOKoE4Df4A3ZtNk122t5gN1F7CSHAz0:WiSYrKe6k/KCeJOBFUsZtNHMGv
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\VisualLocalize_Software_Maintenance_and Support_Agreement.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54dc5b0582a28dcf5ee91594209fe3551
SHA16539c755fda977b32740b4b14ec45fe915e790da
SHA2560feeffe8accdf2f071596d70e69e6ca6b5a84a11a2227bf587d9e12f4173c35e
SHA512f2e28eadc4b4d1e1703f6c13a2e4a76e65a55f55cab4ea19f13d8eb1257a7842fbdfff16e2fa31afe82fe0a7d6e686b66e3ae37251d96c17b9a95f2cd9b723c7
-
Filesize
472KB