Analysis

  • max time kernel
    118s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/02/2024, 17:13

General

  • Target

    Renderware 3.7 SDK (For Windows) Full/Exporters/3dsmax3RW3.1exporter/art/Example3/vertlight.pdf

  • Size

    59KB

  • MD5

    585a30397b2e796e36d856d9778dbbf3

  • SHA1

    b7a9280404da551c49bfba3e6310a4e40aa1c18b

  • SHA256

    1bd739c2a581e8ea732269571c1ab0c1974943e27d9aadcab60b0d0015d147cc

  • SHA512

    d9caee49fa371eba746ff4aaedef8777cc146518fdb466a431d8a5e777a8598147e4190d471ca761100a8ce7488a7b22b8a75180bf69b617ce61b7b3fed31740

  • SSDEEP

    1536:2xPUMeVVtDidGgqyUXpOcheQvOMn8sjMwnb8eUDRZ:oJeVjDrh9TGMl9ARZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Renderware 3.7 SDK (For Windows) Full\Exporters\3dsmax3RW3.1exporter\art\Example3\vertlight.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          842081e1c5da297d7a73b4011a4319bf

          SHA1

          91d771fde4bf9a8ee0798491e1a0bfea64886488

          SHA256

          d2b735e6a609df443f1cf074ccff7762e7af2c7b0de01e487861b0a1d6b71746

          SHA512

          b148f4be785a34c042292d62a4bd5a115e7a17c476f5a4c381b9326da09777186c481b5f89f79027458dcc280f1d6be8bbec9f064c10afab17665fc95f22ffe4