Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 09:51

General

  • Target

    com/sk/lq/general/web/pdfTemplate/Za2100.pdf

  • Size

    25KB

  • MD5

    646e0f75c10d8ce93059da3df13a2903

  • SHA1

    540c5f6c4230ba684d3cf806f1e9b8a58015dfea

  • SHA256

    7a308db491e1a3845bff8a846ed3f06fe7d8c902d67c4e27ce4b9902e08301bc

  • SHA512

    cc70ed82ffba674f834bab238e73fb139866af54b66e27a9d589c79b5e464be63edada030be4c01a82ee35e33abc0d3141111f68f6176cebfdbd361ec44ef4f8

  • SSDEEP

    768:F6Ywov/U+PIAWhq9assZBJQQz51O/oXWJCjl/:ko3RIFooB+c51OgXBjl/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\com\sk\lq\general\web\pdfTemplate\Za2100.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    244f6b88a7e004dc56170cf9e970f36a

    SHA1

    68f3c157e09a514a6fba509a089bc3102f72743f

    SHA256

    0bf6fcffa4417a9c26cbd92579d26222cd71517aa9b3d353df3a4d18cdcbe8fc

    SHA512

    f0214fc09d3861a49d59e41fedd598dd8e5a99b8702e2c237975087328c81e259581986bfe339846a02dd7206bde3d9d7be3fab594e8cab22fb3223b40045b8d