Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-04-2024 09:06

General

  • Target

    11600kg/IC2 Patidar Consignment Bale 2210, BL no.GOSURQL6247568.pdf

  • Size

    2.6MB

  • MD5

    8a4f4cc0e46b3699cf6261d2d5a9537b

  • SHA1

    3bbf8d7e70c6da77c490d4b140dadcffb4c1bd3d

  • SHA256

    cefe8c5cfea5d90041d0b58c9f927453774f13d3d71eb844e91346f3fb049d0d

  • SHA512

    e155d487c1f3c9e73f95adcc85435e3c6059915bd7837a0ee65184c49068a627fd19b84ec6c4ba700ab31136ad477c1e5d22d38c007f451e98a3b2d5bebee606

  • SSDEEP

    49152:aWvMHpYFZjiJywIr9zC9c7+sLo8IdhX/pYzloEYwTOFXSNRdW/2JFg:QpYFNiJyRg9c7dLo8IdRmzeEY0Rd1Fg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11600kg\IC2 Patidar Consignment Bale 2210, BL no.GOSURQL6247568.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    489ba77c0c249af6cf60f03fbf23e4f8

    SHA1

    936b2157f18c17c59105dd8f5360617a17ee31f7

    SHA256

    3e13b0adfb5c7660c2dfb6c226b05a0e1165fb089a86aa01fa23634a2f493ec5

    SHA512

    50f35ebe403c140cb96a5b24a4f2c94f7dc3ae7587aa42a409e1f32460857fe5665209a1d216b141509c40f7f4d5b710d6407dae595e8b4703df1fb75eb538b8