Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    24-04-2024 11:59

General

  • Target

    Paddle, Blanks and Spacers/Tech Specs/A5_Rev00B-4.pdf

  • Size

    413KB

  • MD5

    59bcf029b5eb1226d2c70708d7d845e2

  • SHA1

    5e91cf07a135cf94045025801eff689b7d100cca

  • SHA256

    49c788ef988d5dbf70a8df97c2865c307bcf6cd0b9d4c9005e6aa9727cca25bf

  • SHA512

    77a3fb3a43cb7c1ee3184a158c2a504931afb911af4248d5bcde52dda080619c3bc3afa362a91060c30f97b599557513d777398ee64d7159e6adee6c1968f617

  • SSDEEP

    6144:Ds56Z+OZbGPDL0sYoEU6iGFOdq7TYmMEnjdyuOg2EjLvnbXaZHyHzoXlzRMrXCud:wIZ+ubpsSiuzrjdR2EjzeZSTGg75/hiy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Paddle, Blanks and Spacers\Tech Specs\A5_Rev00B-4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    705a9d9e953ab7989d4fcb9f687bb003

    SHA1

    1368bf2a90817254f475877f13e49a3ba9d6534f

    SHA256

    db4040e185456f3ff80c1ac2092087e0834a8cb001a5053e6d7e0a8912ebabb2

    SHA512

    41ba420fff0b6d1ebd8bb6e04514d2d959dde68da0b32a8022b76372d17c9ae3cfc3dd8b35716e514a49909b0277ecd65f138a343fd50a64aa8b68f58b7c20ff