Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
24-04-2024 11:59
General
-
Target
Commercial Docs/COW - Energized Electrical Work Permitting Procedure.pdf
-
Size
316KB
-
MD5
f95cbb5097ac1119223a066a1722ea65
-
SHA1
88c1e651d6c88a3cc3bda3c8a08331c39385a7a2
-
SHA256
4da25b09e443675dc277c0220520f98e8544b96858bb13341e285059f0b25bd2
-
SHA512
fac2dc8181b3a67868100d528f78f9d0f3aa982ae7490004af5885ad83f56fb78081948002e4e72a56363671c46de7f18201d4513828a80291cfc9994279d7d0
-
SSDEEP
6144:Zv1qemvpxgE0I9ftLtY4JR/WKdedZqvGds9hzAtvvZvgYAWv/hLmdvjkGzeUzQvt:ZUemRxgE0I9ftLtYmR/WKdedZqeds9hQ
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Commercial Docs\COW - Energized Electrical Work Permitting Procedure.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD57a94d27c445c611bb68c3be476b82824
SHA15a72bd5ceba82be8b15246a76089ea947881568e
SHA2568b33120bee3a6a26079bb1593646626754e58680eaee6ece6883af552e5a1300
SHA51234f5355e8b10b0323b38c4196a7abd2beab956eb3a1f82aef177d0dd42ce7ae0d2e85e21015cf93611b56a1a1803cba13e1cd5e3a3904cfb55cb8319ec7d54d5