Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22-04-2024 09:06

General

  • Target

    11600kg/SATURN TEXTILE DC NO 0126 DATE 17.03.24.pdf

  • Size

    91KB

  • MD5

    c888fa0ecff468f45ce5d44eb1e43656

  • SHA1

    1a891f6b099ae3292441b56b6bf26940ab63e4d5

  • SHA256

    e8ffdeebd2df9a2cfcf3dee48ca343e5af07adfedfd134954d47ed295cce697d

  • SHA512

    e27b2a2d0a496eedf8a99953cc4ec1f133cef0d7afe9cecf9ccb5a76936cd143955863ff45eb740cd9cf19c9379b73d64c7a5a2c2b09aae61aea6ce641c6d1ec

  • SSDEEP

    1536:yladaRnKhnLHR98kAC1FR07yrLqhj2tLhdWR/KlK7Ebbm/hm1oz/8SZdMMt5+mqZ:do8hnosRJ3qhahdWcqibQZ/8SZqyMR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11600kg\SATURN TEXTILE DC NO 0126 DATE 17.03.24.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    6c5d35d9ea09896c6fa773653f547765

    SHA1

    a0194f8834bd5775331fe625af1b4e999e64a43b

    SHA256

    e1f579ff3f24f1a4c16d203229a99252de177f1a8fb6daf21046a3e46dfbfc32

    SHA512

    4fd439df4b262280eab7d602073c1ecf74a9278ebfe1391dae88043f4e295cf44ab162e4e0ea7261cd92787d0a3ba649eee4a280394e05260b458240c5a9287d