Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
24-04-2024 11:59
General
-
Target
Commercial Docs/COW - Energy Isolation Permitting Procedure.pdf
-
Size
291KB
-
MD5
0b3eabbedab98a225c7757880222cf7d
-
SHA1
df50280e94240f11532bc15a2978d948c32e7870
-
SHA256
dcbefb1baa9523c84120382644cf3a6c57e373f987223ef7b4a26576cd7c569e
-
SHA512
cd67368b9b75e08a6928032756405b1b31467143ce94642e1ce2d06b57aee49db8b3ed70e531de8ef001bc52337eb8fc2251c24d7a7dc01b6b455fb79c7577b5
-
SSDEEP
6144:1CuqWPBBfO8YqEfHd+Pbt5JjJUOa0aojL1z3A2s7BxRR8/Gr:wVWPC8YqE/d+PblTaM1Q2sNxwer
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Commercial Docs\COW - Energy Isolation Permitting Procedure.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD583b2c738d39461e29478521b867e40d2
SHA1b94d54cbe4588d978240bf5315d38f0a212a8c86
SHA25602bfb3d224cc1a367d168ebbd67f212cdba7b7c218d006b2753e386f5c27c984
SHA512bd9366b6da4b31879cf26b78114241588e9f5356aab1d480b8ec720b7bdcdf647d547c78840c0fc0ab660c0100b33b1334e423457fa1c12bd48345d46ce46a91