Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    23/02/2024, 00:27

General

  • Target

    Tututorial - KTNE/Bomb-Defusal-Manual.pdf

  • Size

    914KB

  • MD5

    4b7d53250322dac81beb0a89407ca458

  • SHA1

    b982e32cc350a4b3ed061e6558301ad7a811b819

  • SHA256

    7cc4fc928eea7de026709515e75de898cffa8a9b80de3535c057f217debe19b4

  • SHA512

    3d4d1772c5001ad3ff6a210d731b0706aa3a620974adec485ea982f22bf361f246a5ac7207eb9f47ed2f04df1f36f22c7832f433d5990cb4b7bc6d1c739abb0a

  • SSDEEP

    24576:YsCqonPdb1l1u6GrQakOkNrWHOTBBvL/Nf4pNvxeidrSmH2BMpn98OEj32X/utEe:YsCqonPLl11yCNrq0TvL/Nf4pNvxeida

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Tututorial - KTNE\Bomb-Defusal-Manual.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1664

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d08ee5746cb2300698bed88e82120007

          SHA1

          26ebf096424c336034288e29351f10f4b0e3411a

          SHA256

          23f7ebc1ed39c8be6dfcf2710033c16ffb7d3691f770680a41e89a406c0b5ac3

          SHA512

          3fec22236406cc92e7a3d45755e2fda2ccbb9a11a372d667a27fe2d03032ff3c2233853eb99af12496703fb045434eae2588fb6b382283e5f34baa2827e4a12e