Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 16:30

General

  • Target

    UNICEF JOB.pdf

  • Size

    210KB

  • MD5

    23f74b637c65299364b85922b91492ad

  • SHA1

    4d6e146c21feeb273297966805ca21c61cdbaa39

  • SHA256

    d260144bc402742335aa5b41e350791f8dd139f8ca51e3d05f1717930197ff98

  • SHA512

    08a57fb94f93dbf7b465b37a26230f2c2266ef6d8b63cb0525ecdcb949eefbccabe538b6d9d25184d7cb14db2d836d85cc99a6484c0b3087f413d9e43030aec0

  • SSDEEP

    3072:rEoXE80ZCVEG7ND/myUkyXk9g96rYpHd3VYT+K/tV8bR+0CcKlO04/cvwvGGC:rEoXE84GxbyUGd3VcEnCG04U6C

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\UNICEF JOB.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    afaa5342f2b14ed41c95f34030b8447c

    SHA1

    3d67ee75e907ebf851fab0a5c46f14f59e3a0843

    SHA256

    6f31e689e83fad48bb3d378560f3a3b96a57cade6cb934326b50ceda7c22fd7e

    SHA512

    c2621e0a894c54c4851d8b74424558b8cd4ecdea82eb12a0474bece624c73005bf3d788844d08cb82e4af72d9d33b8ea24fb53fcce59783f9d4ff825509bb0ee