Resubmissions

18/01/2024, 17:24

240118-vysrraefg5 8

18/01/2024, 16:21

240118-ttnfssdgf8 8

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 16:21

General

  • Target

    Documentation/README.pdf

  • Size

    176KB

  • MD5

    a427b5c1690f1bab5137e1bb2110d00b

  • SHA1

    dd936235b66d22d86ef591169c0e39db9448c954

  • SHA256

    7e206eb7666330413b76240e1343848f00cdbbfb56cd1b30f943f8169ea63b34

  • SHA512

    c13053f662b00145fab710687f9c779ef1549a63f25d35c3012d8d1f21b53f1ed79b1038aa7d3a879e13c659d6d851d1544d95c247e097c57046d79c6e809004

  • SSDEEP

    3072:SOSOYZwC7Scubu3RhcgaqkCpEqLh8diO6ED/JTpxYIynqCo4wYZomwaxtGzOaeHf:SOSPZwciuhcgaGpEqLh8wO6EbJ1xwqCh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Documentation\README.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2756

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c5ee60c4ffb27227367c0bc438005ec1

          SHA1

          63cd4323d5d50ea09dcec672b5cd6222a2943f89

          SHA256

          400c128170421a836318daef4a84f151e797e1a54888101bd76c9eb671731ccc

          SHA512

          2381d7e8ddc7c63ed0636f172392d46e944cecc8cb8427d7a06982b7f347935c1ceb916c48314d31d568cd43bf48af541fe017ca495d41e64683f48d00e2e66a