Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
07/05/2024, 09:51
General
-
Target
北王图纸/2-2、农沟清淤1断面图 Model (1).pdf
-
Size
151KB
-
MD5
bc0780c62bebf3d9c2da5cfbbe553d8a
-
SHA1
99c5a8c8b878fd1a530c873f52730678e0eb25fd
-
SHA256
19a1926fbed73d3e8421441592ef65f3b5aee1748b62d317b14a64b545701360
-
SHA512
aa44e308fb028312f24a03ffdad6a2e900cc4b1ad41a100b6940e05b834ddab84d7a2c54092d886d8f5965b198d646469a738a33c9830689e5c80c789140e1c2
-
SSDEEP
3072:+/PDA3sbBfQ0+k4NkZar3X9k91/SibUpQOo+IfcIa3AohjAp7rSmp4avfW6l6D:+/LA30BYfjkZOywcjkp3thKfSe4avfLg
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\北王图纸\2-2、农沟清淤1断面图 Model (1).pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f88fadd280d86d016c8ee14e4513fad7
SHA182d0083e2dcf05a2cb7685948037e5e4699a8f70
SHA25624376a4ad70dd6e1ae530ffbc8a3c32498b34daf933e0eb8b55c134daebf9167
SHA51232b7eaa8527d3894a4aefa8c1ab115ae79b050bf8eeb447c914bbff3d64b3c79f7d61ac41a86c8464499ba482f16bd2e6abe9c57b4ecac4ffeae5a755314a4b8