Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 09:51

General

  • Target

    com/sk/lq/general/web/pdfTemplate/Za2200.pdf

  • Size

    25KB

  • MD5

    29791783eece840f11971e345a2ef58b

  • SHA1

    5a4d5e1116268b38ad4a652814bdcf8e7cad88ed

  • SHA256

    ed2640b7cf7f481d74b539d5c4cec1663d8453556a96e72143c96e08808a674a

  • SHA512

    b1e9af6a5928b735e6440e50794f1c2ae93b09dc2ec808cf6927e19814c51428da12d8fb1df93ab3bc6889844e8399847dddc98af63063496fb34336db2319ee

  • SSDEEP

    384:icEgYUv1tfPFA8kmQvA3zfyhC0YTK6t5LmCS6PoowpO/oXWOs/4NVeGlbJ:ldYO1tfPIAWMG6ewoo9/oXWJCjlJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\com\sk\lq\general\web\pdfTemplate\Za2200.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d5980ccdc019fd2c183f0f630a15b9f9

    SHA1

    2f454a51340e642b282a59f65ea80c6bc48e3504

    SHA256

    a1740087215d85870fc807bc05b6e5bd76e5d31e5358ff8669a7c305cdb22a4f

    SHA512

    bd9048b05de44d086e26cb1cd12b8b4ce406a41264056150f4a8470040b1ecbef6a43b1754f96da68eb6442ea252a1819b1530525b40ff5dc004d25e85163d5b