Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
24-04-2024 11:59
General
-
Target
Commercial Docs/COW - Permit to Work Procedure.pdf
-
Size
714KB
-
MD5
2074418e7fdf85f62b117f6f308822c4
-
SHA1
bb7ee7acf1c3a209b059f5def5e7b3997968dde8
-
SHA256
8249ef4dcd5db99afe9c2aea20800907671b1804d7a2706a549a63f3ead34c28
-
SHA512
98147f318af3f99d83eaa7e735db998e5cc9f9c34c350f1e704d7be78a184c532e24b37c76b1217a4fec31172e736defb394b6b5a317c7551fea3d72b8f6b57f
-
SSDEEP
12288:Ap9JbAT6f/ARd5eaa5nyZe2rCk6ikj6Ct2XWZg5mecHB+NqKaiKGKfcZbJABAJc:Ap/Amf/ARdVa5ywOCCOP4XWZgc+NqziS
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Commercial Docs\COW - Permit to Work Procedure.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5b3fd1a783d31a1a1283467da92beb081
SHA190375606b931abf572177cbc15d5b0eb9ae422f1
SHA256b5cd5a9f79e491b7bc592e3f9327d5d2d483025abdc0608758639af8a3e89488
SHA51214094e54cec41a96665e364bd244bdb2f607beaeb54ec9ba47fa813dac27ff0c0f14cb5502a7f74608036c53625cb5a592c81a43e4afd5673599b6aaded447ba