Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 09:51

General

  • Target

    北王图纸/1-1机井(80m) Model (2).pdf

  • Size

    219KB

  • MD5

    d9d6895c83e1e3752001bfb993648b50

  • SHA1

    73d85349731b21abc45441ddd10cf53b2d52ae5a

  • SHA256

    558a3a9110d9b9ce5114c56452d52247eff0e21eeb72ceeb62e40b956aacb4de

  • SHA512

    a0e5dbf49cef5d60476a28195b2006818aa5ea68d992e82b50eb746c2272b478661868dbcc7979ca6e26c293e6dd2f86ae6b0ab9bc4c1643328a4a8cc06fec8a

  • SSDEEP

    3072:+QCJ2dOza7mlUdU1VQA8kZcq+sYgveFDV736v4eyWGZt467Hf2m6B7Z8W:+QUza76CkSDyoNKweyfh7/ad

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\北王图纸\1-1机井(80m) Model (2).pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    13eae5f5b28fbbe8378247ea7b59f82b

    SHA1

    4485ff2c9f06c44468ca65da15ba2d69b314b5bd

    SHA256

    a63b2f17375ba4c61ec475428650f0c2809a1667ad98df76538627906af5b2ff

    SHA512

    074b59829f30d9286f55b66a05f537a2ec6da339fd2c42b43b41165a940e59b47798921933ed4a4d298a8a3aa1d7e83b914fea06ab633164448283acd6fb9a11