Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-04-2024 09:06

General

  • Target

    11600kg/YARN SUPPLY FORM.pdf

  • Size

    794KB

  • MD5

    630c248a9f086a4420212984184fe113

  • SHA1

    1543a5cbcdbc1b2d4a5fdf12cc51c6912476b393

  • SHA256

    52bd5ca6a6b0491a227f42a549cdd3f3272d21fed98affb4757fff093dd90d6d

  • SHA512

    1fe3861493763bcc5a2aff35f774f48bf08c2ba299ff156c976b60f29e580fdaac88cc96d73ae7a06abc3614c4582c92717e12b9df11bc65d293bbca3b7b65dd

  • SSDEEP

    24576:3aN6KM/SLDE1nNfqOVY7Ky0QjIznTb/JGu+fQv:3LKMakNiOOF8zT7JGFfQv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11600kg\YARN SUPPLY FORM.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    62520fed291d4dfd96f67c60c54056b5

    SHA1

    faf20041adc8fe6e0345d247f2fc70756a1e2c2d

    SHA256

    c679a91e7287a29cca8fa3d08b9fd93f2670d58426ff7f13e3005005619bd7f6

    SHA512

    9966e2f51752d32b275d2fc50940061731fb45e54569f549c0630a4f58f22b089970dc71c003f1f1b4780281dc456aa0755d72cce2a7691faeb6c370d2b73050