Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
01/05/2024, 13:29
General
-
Target
秋香免费IP-提取器-自动换HTTP代理软件－一键花刺验证V5.0/Navigator Proxy Auto-Config File Format.pdf
-
Size
52KB
-
MD5
7bd2ed5e9f907c48a84318e9bf59e1d7
-
SHA1
c0aced53411fa786e27cc00e2cf4c725f7fde18b
-
SHA256
37a921bb6e9452ce91e89d0635129e7767d7d649a70f4dc0b636acbe9284fa6c
-
SHA512
c05ac474cff41f9caba95560487347b12ea146a6bb210a28156afe46e12f106d774687f62b563751465cbdeeb311bab6a500a2f26b00aa526788217e58f32ba1
-
SSDEEP
1536:OIDi5km8LbSGqrONDufQ+bWSomLQS4h9JTmCI:OIO5D+CfQ+/omsSy6CI
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\秋香免费IP-提取器-自动换HTTP代理软件－一键花刺验证V5.0\Navigator Proxy Auto-Config File Format.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5753e21d2ef5a356750af9a4418eaa59f
SHA1bdf1cdba026b19436b61581d7200f4d4b9ad567c
SHA2569125492a9c163c3f4d7e69149e85537f46c17a52dc6de0d976966fc15287d56f
SHA51228a58988edbfcdd8ace3275709ea90a3e70ca56eaa3c6c1952f0c523c45d3e671958872067c5e24dfaabfc3365c167da0c7c3bd60c1bab871e9b9ffb62c4be0a