Resubmissions

15-08-2024 23:37

240815-3mbcbswgkj 3

15-08-2024 23:36

240815-3lyq8swfrp 3

15-08-2024 23:35

240815-3k8j2swfnn 3

15-08-2024 23:34

240815-3kte5awfll 3

15-08-2024 23:30

240815-3hc1cs1hjb 3

22-05-2024 21:23

240522-z8th9ahd54 3

22-05-2024 21:10

240522-z1jn3sgg8v 3

22-05-2024 20:58

240522-zsa2zage37 3

22-05-2024 20:37

240522-zd98hsff7y 3

22-05-2024 20:28

240522-y8z6csfe59 4

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 20:37

General

  • Target

    1. Kadınlarla Tanışma Rehberi Modül-1.pdf

  • Size

    1.6MB

  • MD5

    7f026da8b8a48450122ee63f4eb7678e

  • SHA1

    5130946d956e96287bdafb12d2c7f534dda04e0c

  • SHA256

    11c85650b152c0e0a7405e3af1ce88077f13d9b4078a11fe0852c1c9cff56998

  • SHA512

    a8e5078ba14568c58242532df7f4d76417a5502b7dd418e08325ce5691b16a3f89165ab18fc6e1f498af606d2113e86173fb184e24854ef685c72f881d69d93d

  • SSDEEP

    24576:QqDxnPBnyvKqEsIzzHwTRGoK4BzbwlLQmaLzqFvqUInoYOEopikrWIjT:nJpfQlGopV0lLKf34D76K

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1. Kadınlarla Tanışma Rehberi Modül-1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    99e842b4448a816ae77b63ee3378a309

    SHA1

    81a9b1fe85d598436ff1dd13997e273dceedf6b9

    SHA256

    c9263ee8018944bf959368bb4435bda4b407a6a28bd155747fbe0ff64d8ae1c0

    SHA512

    51a2b3bdc72b78a5feb29bc1199e5d0d69e9fb983ac185796cd2dc30ecf10fe4672794f62b4f618b3865a93929308e7eab719155150107c115938a596a261b84

  • memory/2068-0-0x0000000001290000-0x0000000001306000-memory.dmp

    Filesize

    472KB