Analysis
-
max time kernel
120s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
19/02/2024, 20:58
General
-
Target
skysim-aircraft-md11/Documents/SkySim_MD11_Operations Manual.pdf
-
Size
3.7MB
-
MD5
b50a1c9207dad0da69d143794027e16e
-
SHA1
dbd2266099ec0b6faad3c0659305358d1a6323bc
-
SHA256
83529011c57f93f8d452c5cd4e712b2441eff910164258468015fc30774d43f4
-
SHA512
8fa320a0e4606975baa44e392aca23e2ec43a17ac1580f7298eebff645808a308bf1724f3612a449729f3de12acd4a2543a7c1dd96a64d43b780d69c56cb1438
-
SSDEEP
98304:gaFQaQ0xtj3mli3iuqEi9kV/XLXFJs49ucz:6alj3mhudXV/XLXF+2uc
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\skysim-aircraft-md11\Documents\SkySim_MD11_Operations Manual.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59ecdcd548a0bd23eb612f208ef1b5007
SHA172e51602627aa9a559a39bef1e2641a4f8db12ed
SHA25673cba177f6794f4516206bf5fd75a81c54291a77f9b5a14a901c7c8c3eddec5e
SHA51265d772ce56c9f984357957b86d8eb5f65f36cc5ddc77dbebbaa6c35497b541391acf363b21a3b8f7d1ba687d18ae5d04ac29edf11fbc3aa876d695adf2c6ec05