Analysis

  • max time kernel
    120s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03-06-2024 15:46

General

  • Target

    AIR FORCE/LCMP-IDE_Follow-on_Exception_to_Fair_Opportunity_Justification_(004)_Redacted.pdf

  • Size

    856KB

  • MD5

    47078052d5ab665b327be8e36a6599a8

  • SHA1

    dfb8db0769a680baceba07f07d15ab2dd6d44baa

  • SHA256

    c5cd043fb57b0ff49d539ba937460c8f048c03984bccd544b9a0a8010e8b4cbf

  • SHA512

    3592af9494cb8c1e51206aaf1b09f7cda203f06d44c94bbe46a5ba56dd98638bdb8676778b8ed50f19dec47be497dd6d3a75618d7623b0a657b9196239a10b67

  • SSDEEP

    12288:DccFx6IUA/GREWcchalfMj+BMpWccc43WeEImLgjVccJIhGcdvQEzs:DD0IUDgCqJ2xeB6gjVyrds

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\AIR FORCE\LCMP-IDE_Follow-on_Exception_to_Fair_Opportunity_Justification_(004)_Redacted.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d9b572e0b237e161d5efa8479c6df2d9

    SHA1

    3cad347a9def6652d2b6500b8596961a7e9cc754

    SHA256

    bfed65b188c9ff358b4abcf1833a888e053959b9741a80104533c2e9f9c36b5b

    SHA512

    f296db0294b13cc5d687c8ccd608f36127996e8ef7a3d81cddf642b0abf1ca4ba613ec87e87bbafb9f489e6aa22201a97ad1213e45a47ce5aaca07cdd3c14f25