Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-04-2024 09:06

General

  • Target

    11600kg/SATURN TEXTILE_LC.pdf

  • Size

    85KB

  • MD5

    b78d0bffad3e76bf79a14f17d1f16519

  • SHA1

    7a4b76457617d033db73fa49e5f1013e0ecf9faa

  • SHA256

    20f1973afd38664f7b6188d0247b51b534ce478647b275361f533208169ede32

  • SHA512

    5b0a198a1374c05238186c6f8c8a51a1bb3786a4edcc75ff3475eec7b0432f1655923b16a845c9f93c5b5b72e2aee5395114efc173867f499ae3838bc4991fa2

  • SSDEEP

    1536:lIyepxCo4HOd7dsaOsqAynVJlKehmpmehLLBlgu2lC0bI8eWK:uyevXd7Oa1yFhMJh2PbI8Q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11600kg\SATURN TEXTILE_LC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    784258d147522bdfe858f9bae781dece

    SHA1

    593bc65facc70baf9f061708f9e89cf50a311203

    SHA256

    db1ca27944626bb38f7f52316c9f59b66158df620f5200b551b0d03fbf0112a1

    SHA512

    e655bc818afe3559011119abb1310fa2b58344b497c1d7a5bb3791311105ce7067ca0cb9ab6089af2d9926130ab2bf53df12b19207bed0da5c4bdbeec3f7417b