Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
07/05/2024, 09:51
General
-
Target
北王图纸/1-1机井（80m） Model (1)-北王庄.pdf
-
Size
376KB
-
MD5
7cc40258e466fefe4e769602b8ebb1ae
-
SHA1
bfa09240404a0edc565985bc5f55f9cd5ff3ab61
-
SHA256
1d09f17451fe7800ee12206de33590d6cc45591aa5abb5090da15b36f3738ae7
-
SHA512
14eb1e8510ef88615b503eb7389e87d7e5f776b42e1ae8e88483cae515adb7e16521d80e8d3554cb8cebfe38940e8218d66bb8d234758828d33078ffb3f892bb
-
SSDEEP
6144:+HKl9ascdw5BWWw3D+NwT2nvuijUx8Im5NEUqjlLRlDSC9T7IeiQVE72hbStHGxD:+cgsAw5hID+NuPwUxQ5iVXSChPiQVE1a
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\北王图纸\1-1机井（80m） Model (1)-北王庄.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53f977217e0d2c7c28523ff2d3adfa732
SHA16198a1da21c12958997954dd7cb7ddbc097d93b1
SHA256f8e6bd3d189744d496e1f973e9ac5edba25fd82bf88ec6136810053d5c21e22d
SHA512955dedc89c639af6a7ad1a6ba282ce5ac257613c21d5c60eb05c90360a2891f36811c2a75b2f52dd530219ef4f1f6528e8cfbe0067d40c106cf73311c63aa6ef