Analysis
-
max time kernel
118s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
03/06/2024, 15:46 UTC
General
-
Target
AIR FORCE/HSIP_FY21_SOW_BusinessPoints_20210105.pdf
-
Size
865KB
-
MD5
cb1d711143d989972ba6fe98ba2d0b13
-
SHA1
04935de584e065b77d2377180e1bf7b1e5cb11ab
-
SHA256
0ffcbbb960a9f3b55eb047b01d5553e6e431c82f6c3312fb09b4d36b15daac8f
-
SHA512
e74638003636d0accb27002799518824a689db08d9b052ea42bbaf79d360c1e79bf17ea86dd72301841e0de54108202295cfd53c0b83c3db147f9dc2d88e355c
-
SSDEEP
12288:1J36aYpa96/8wsO8OKDihujrCiIhUfQNd6mFSqrAuH/sFuhgXikXT+5l6lNRWqAe:TT+aMhsO8OKD+NLFSOEm/kL3WlSB
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\AIR FORCE\HSIP_FY21_SOW_BusinessPoints_20210105.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f82533e9896db4f74f26daf13fae1d10
SHA105f5b30eead8ffbf55ad64c86c33727448f181b2
SHA2565f65f7cc69035b6212cdf04c9da2a629ca0fc6c4eeab56e809a7dcf6c922ab01
SHA512762c9e3c87b64f61b82280bebc70607378a514c0b1ae7ded6f92a5f15c55a8fc94f40e01b2bea55d9a426d5d13c8fdb42853ab417aaace484effbbd6dfd5ef80