Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
24-04-2024 11:59
General
-
Target
Commercial Docs/COW - Excavation and Trenching Permitting Procedure.pdf
-
Size
232KB
-
MD5
815c0b5b7685924e590ff8913db5c430
-
SHA1
2afb4b9f7929f033972ca7274bc15c11e09eb9de
-
SHA256
4ef9867a8df130c9e16137a59ad091cbdd81eca080cd93e2287c0e029ee63001
-
SHA512
4e4c034e8ce0e5c2ffbdd7427f93ab976abad28915c28bd2dd59877b9374d5c1961fb07afd04c768c93d0f573b35e939534aa0de9a26cdb7e2e5d2f402ef79c2
-
SSDEEP
6144:bhX3O0wASgENsChjuzgGQ5hqN2+UTuzGzCv:lXe0wyZCVqZQhx+e2v
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Commercial Docs\COW - Excavation and Trenching Permitting Procedure.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD529e856372eaa6fbf7f1df60d55962b1b
SHA1d3064efa56ec254475b6ade5775901a7cf31d44d
SHA2567e1eeac0f66d28a04327c95481900fdf5ab2962218a03aabdad3c8cc8379eecf
SHA512f01c3a5a28e94abcbdd21a5543a33feae592316de2c63df2d0002d23b647603cca248fd688c915b9cb526e08c2a1fc7f4445faa3ca7d5b5086d5e208d3885116