Analysis

  • max time kernel
    120s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/02/2024, 17:13

General

  • Target

    Renderware 3.7 SDK (For Windows) Full/Exporters/3dsmax3RW3.1exporter/art/Example2/morphtarg.pdf

  • Size

    53KB

  • MD5

    82398d4e571f30b3e080b45867aa39b5

  • SHA1

    26b2780af2ebde46d7facc7d904c3d110c53893b

  • SHA256

    d9de68ee0a79357c56f9c89eff398c22ed80c985693b97ceff28084679dfd035

  • SHA512

    a9586ebd20c9001979799581375ad36d3e0842e93c5482a8d255b3961c03ed51d0c5768cb43f27dfe29a2ddb5323a5e9ed84b2d5c3d26fd5b7e223ad7cc5d573

  • SSDEEP

    1536:EaDb5NAypAwvPchjk7pjmrPdf0WGUMjUoa3DsaaHsux4Caav:5NAE5qjk7c1ua3QaaHsuiCn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Renderware 3.7 SDK (For Windows) Full\Exporters\3dsmax3RW3.1exporter\art\Example2\morphtarg.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2276

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2290298700353f3b8a5b99298eeeff4b

          SHA1

          e49a18947311ec4edd0a750fce7976b66ed71487

          SHA256

          4d20e94edaa6228fcb30ced893ffa5fbb69b782bdae677f7bde39411b1c6cce6

          SHA512

          da24d3720da6591aa2c2ad203e9152d26e88fb8408e41b2013261d6e905c6c80f5f023e2d145191dc22ef7656484aa5a140f2ddcc7f380bad448a45cb8c0a82d