Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
03/06/2024, 15:46
General
-
Target
AIR FORCE/PBL_PWS_-_DRAFT_02212019.pdf
-
Size
1.6MB
-
MD5
c7a11e1abe0c4fde829d93c58451fb59
-
SHA1
08c7d69c371f72358df2cfad1673fec35f1e2872
-
SHA256
275933d39e504e7973e622ffe34370fef53cc0769dc8a11cdbb50c0cf5033d17
-
SHA512
ace47493b4c9877f8c5df2f4f70aff4e32de702807f5b7efa5a8fd474de4944f43941e67bfd9029db3adc57b62f0c6555d24f30d026a7e9d9510c3aa8c21133b
-
SSDEEP
49152:oVrgYtrnXvvv21wGVkz8iIjhfSw3c8YVxJBeggqZ0L4g1d:o5gYxnXvvv2yoViMhfSw3cRVxuwC
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\AIR FORCE\PBL_PWS_-_DRAFT_02212019.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD512d477022ead134f299dc8da81fb59ed
SHA16660fb9b2fb334af709c889d35c6a8d2f5d0c420
SHA256c3f536fea909bb3e2820e2dcdbdfbff4b74cd89aea4f52986c7266c8ca22ded4
SHA5127850ca8eb0d796af1a95fedb27615ccb80929b068b0c8c6c570ad7970a1de8d4fda20f81797f61166d77c54e2eedd4b706b206d8b4343da8ed1a7d3beac5a49e