Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24-04-2024 11:59

General

  • Target

    Commercial Docs/Simultaneous Operations SIMOPS - Safe Work Practice.pdf

  • Size

    246KB

  • MD5

    12d74ea985de155e037bdafca25d5dce

  • SHA1

    56e0e2bc37d130a91a8cd4494a620a791d2f0bd3

  • SHA256

    4d06991ac96d86a1d5b6c83ea4dcb2f19b0e55550f381e0deaa0f2b0d89934ed

  • SHA512

    d46ec3f1fda1ee11e0f323b458b18306f39c699d948113631b16af12d439ef92980e90055f034438a798c6e35d8cc6d95dde6e6c61d37202080f162a7c07b7cf

  • SSDEEP

    6144:dvpvWXvNlvIN4dvx6vnvZNDPv1vi5Lov13vHrvmVf56y:dxuXzQN4dQPjDPtq5UZLu76y

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Commercial Docs\Simultaneous Operations SIMOPS - Safe Work Practice.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e70e4976a43f2c049feed16f5774a55f

    SHA1

    f8656dd99b6d2c8de18889c78e44a0c9d33260c3

    SHA256

    0a246ac1373f36f35f9decf8c7382890cc4005eeeb1be006b144754bd99d2bbc

    SHA512

    c6263d029c50a8ee2b7f48d6476d02c728de137741766bf2e81583b6d5a06814e13220c3ebcb2db24c000367b1d924cb099ae94958c39be68750f474632df2bf