Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/01/2024, 18:13

General

  • Target

    M19-063.ZLetter.01-22-2024 07.53.49 AM.pdf

  • Size

    364KB

  • MD5

    2da293896288a488e0b14c3b64dd3031

  • SHA1

    2d63f0f6251de7cc8c6c70e35b8f9ab30f993a1a

  • SHA256

    4a52f4573bff0fec133381692bae31bf73e21a45f8826f14c27dfc8ef410afd1

  • SHA512

    43bec97201a70caaf281a044152bd74c4878077c6f6751cc7337a018100bee01ac8643d4eae2aada366d63cbe227c6373f1e4766b28e845d821fa3d927c96237

  • SSDEEP

    6144:HjaR9JHFRD4Y28tCgcltSMfFhap4sTwSZv0yeRuIhPJ3T7hRaMSNfI:Hjc9JHD4Y28kg2SMfFUp4sTwSZfeMSFH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\M19-063.ZLetter.01-22-2024 07.53.49 AM.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5fa3bfc91d9249325a82d8d5649684b8

          SHA1

          2559ddd44b68543356b82bdfa32468fe722572a4

          SHA256

          ee679494ec317e45b062d0872195edb0918fd7ea42adc831b648c3e871d01fd6

          SHA512

          169418fd8278cfd4736c425f468640048feaacfbf91dc9dcb7cba11e936484d88680c4d99447199715fd08dafaf732e262a9935b1ebd43e084948a4a75c0b2f4