Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    22-04-2024 09:06

General

  • Target

    11600kg/IC2 Patidar Consignment Bale 2210, Invoice no.COT28A TO C2021-22, TC No.822705-01682263.pdf

  • Size

    410KB

  • MD5

    dc683ebbc168f9708bfdff2a2b78c1ce

  • SHA1

    0d646d2ae9e7ab555b0a76459d9426980ff4d8bf

  • SHA256

    8006fc07fbf41eae0ee57308e233b08eeb940ce5bf8eb7e1d545f8f464926efa

  • SHA512

    a240675781dce9a41270f56109beb62b0ee95f7930f883c451176b945383b44785eea27507f88c950be2fce832ceb2d2259153f7c5a3969fec7586991807660e

  • SSDEEP

    6144:K+oCbk+cUkXV60WH4mPmxux+NieX+prldOCSbcl5Zot+7hwLwbGJnIov4ioXwm1A:Ho8ksLuxBQXNS/t0SnISVQwvOKFw63bX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11600kg\IC2 Patidar Consignment Bale 2210, Invoice no.COT28A TO C2021-22, TC No.822705-01682263.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    36786dbd24d6f9b3d70f1f518051f435

    SHA1

    80bb8d8a65d7fce1b35127332679cdabea57d3a0

    SHA256

    1b01e7a77cc3f3533245ce327a30ff9f71cf4580603f617ba3691f97c4c1902e

    SHA512

    19c65ab5405b54773d8e41ce46a14b56179dc6d7dd0675fd9627bc0020bb7841ad90f78bb3e5109d00f2cbbc02e2305921f6f4bc42053051fd914fb19546f9fc