Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
07/05/2024, 09:51
General
-
Target
北王图纸/2-2、农沟清淤2横截面 Model (4).pdf
-
Size
155KB
-
MD5
e949c9e691b618e9d00f09950dfdd2ac
-
SHA1
b4d6cecdb35f47cd6db7e92a650180dc53de0abc
-
SHA256
8fab4712376006ee7d392c644cfed67d41db80f3e9dde2a5bbf3f8a69f1fd530
-
SHA512
d58d8cd140be316419ba635b3e20f3dadfb17d6538edd10e1267cb686e83062d89ce84b5c01cda5ece95dc0e8df613ff5428cb43430ba5ba5243c77b34693fa8
-
SSDEEP
3072:+g3ZnCGnpWitRVJetyuNkvduq04/QQUo8yT9yxsFFif6/nWjr5mBA:+qkAJeMuNefUo8U99FFiCvW35J
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\北王图纸\2-2、农沟清淤2横截面 Model (4).pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5898e56b9af859fa655d98098ef5f78ac
SHA1cc5dd18835fb1ab418ca2fbb7d2c75bf99ade482
SHA256f6250e8765508baafeb0c2f5c98603f820f18a3e2a13a43cb881edcd2300a1d5
SHA5129bc69a5e5aa3f417184a4bc0479c20cd4addc968c39d45c1cf697e5657d894d473b269ab3b81fc4b929875735f8c4283d880ae46bc6d3d0a71c447929301d76e