Overview
overview
4Static
static
4AIR FORCE/...FP.pdf
windows7-x64
1AIR FORCE/...FP.pdf
windows10-2004-x64
1AIR FORCE/...ed.pdf
windows7-x64
1AIR FORCE/...ed.pdf
windows10-2004-x64
1AIR FORCE/...T).pdf
windows7-x64
1AIR FORCE/...T).pdf
windows10-2004-x64
1AIR FORCE/... 1.pdf
windows7-x64
1AIR FORCE/... 1.pdf
windows10-2004-x64
1AIR FORCE/...22.pdf
windows7-x64
1AIR FORCE/...22.pdf
windows10-2004-x64
1AIR FORCE/...ce.pdf
windows7-x64
1AIR FORCE/...ce.pdf
windows10-2004-x64
1AIR FORCE/...02.pdf
windows7-x64
1AIR FORCE/...02.pdf
windows10-2004-x64
1AIR FORCE/...05.pdf
windows7-x64
1AIR FORCE/...05.pdf
windows10-2004-x64
1AIR FORCE/...1 .pdf
windows7-x64
1AIR FORCE/...1 .pdf
windows10-2004-x64
1AIR FORCE/...ed.pdf
windows7-x64
1AIR FORCE/...ed.pdf
windows10-2004-x64
1AIR FORCE/...19.pdf
windows7-x64
1AIR FORCE/...19.pdf
windows10-2004-x64
1AIR FORCE/...AL.pdf
windows7-x64
1AIR FORCE/...AL.pdf
windows10-2004-x64
1AIR FORCE/...17.pdf
windows7-x64
1AIR FORCE/...17.pdf
windows10-2004-x64
1AIR FORCE/...20.pdf
windows7-x64
1AIR FORCE/...20.pdf
windows10-2004-x64
1AIR FORCE/...ts.pdf
windows7-x64
1AIR FORCE/...ts.pdf
windows10-2004-x64
1AIR FORCE/...30.pdf
windows7-x64
1AIR FORCE/...30.pdf
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 15:46
Behavioral task
behavioral1
Sample
AIR FORCE/3. TMQ53 CLS PWS-RFP.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
AIR FORCE/3. TMQ53 CLS PWS-RFP.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
AIR FORCE/Attachment 0013g - D-IBCS-0471_Delta2_Suppl_PE_redacted.pdf
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
AIR FORCE/Attachment 0013g - D-IBCS-0471_Delta2_Suppl_PE_redacted.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
AIR FORCE/Attachment_7_-_Compliance_and_Reference_Documents_(DRAFT).pdf
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
AIR FORCE/Attachment_7_-_Compliance_and_Reference_Documents_(DRAFT).pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
AIR FORCE/DRAFT JNWC-IV-IDIQ Work Statement v. 1.pdf
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
AIR FORCE/DRAFT JNWC-IV-IDIQ Work Statement v. 1.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
AIR FORCE/Draft GRIM SOW 7 Nov 2022.pdf
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
AIR FORCE/Draft GRIM SOW 7 Nov 2022.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
AIR FORCE/FTUAS Applicable Documents for Reference.pdf
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
AIR FORCE/FTUAS Applicable Documents for Reference.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
AIR FORCE/GEN-12-AMAM-02.pdf
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
AIR FORCE/GEN-12-AMAM-02.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
AIR FORCE/HSIP_FY21_SOW_BusinessPoints_20210105.pdf
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
AIR FORCE/HSIP_FY21_SOW_BusinessPoints_20210105.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
AIR FORCE/HYDRA PWS_Draft_RFI V1 .pdf
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
AIR FORCE/HYDRA PWS_Draft_RFI V1 .pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
AIR FORCE/LCMP-IDE_Follow-on_Exception_to_Fair_Opportunity_Justification_(004)_Redacted.pdf
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
AIR FORCE/LCMP-IDE_Follow-on_Exception_to_Fair_Opportunity_Justification_(004)_Redacted.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
AIR FORCE/PBL_PWS_-_DRAFT_02212019.pdf
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
AIR FORCE/PBL_PWS_-_DRAFT_02212019.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
AIR FORCE/PSIR-APC-01 Industry Day 4_21_2021 FINAL.pdf
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
AIR FORCE/PSIR-APC-01 Industry Day 4_21_2021 FINAL.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
AIR FORCE/Polaris_Draft_SOW_1_Jun_2017.pdf
Resource
win7-20240220-en
Behavioral task
behavioral26
Sample
AIR FORCE/Polaris_Draft_SOW_1_Jun_2017.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
AIR FORCE/RFI_FMI_11192020.pdf
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
AIR FORCE/RFI_FMI_11192020.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
AIR FORCE/Site Visit Sign In Sheets.pdf
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
AIR FORCE/Site Visit Sign In Sheets.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
AIR FORCE/VoICE Industry Day Presentation 20200930.pdf
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
AIR FORCE/VoICE Industry Day Presentation 20200930.pdf
Resource
win10v2004-20240508-en
General
-
Target
AIR FORCE/PSIR-APC-01 Industry Day 4_21_2021 FINAL.pdf
-
Size
2.9MB
-
MD5
18e6f51aab76cbe5a027e38bdb09b5b9
-
SHA1
12195b7480e3b55df22b8aa7906ab4aa65960c24
-
SHA256
fae4e2f420286950099b861a622fd196df4ac3390bb8a54bc63bc7bd964da3f0
-
SHA512
2480158f8dbcd92ade8ad5e27dc218cbe8016bad936bd4ac304a631b17b50abc6813528c5ed34362053d358b8a9dfb5b3354e23a5df0eef06ef59c95dfe5c710
-
SSDEEP
49152:AukoukOukgukJukNukEukVukJukcukLJoxZ8uk+ukdukRuk+6ukNukXukDukFukT:AuTuJuVuwuouLuUu2udu0JW8uRumuAuI
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2212 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2212 AcroRd32.exe 2212 AcroRd32.exe 2212 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\AIR FORCE\PSIR-APC-01 Industry Day 4_21_2021 FINAL.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2212
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5203799da32dde213943a05eedf291a2c
SHA19b4a65c46cc9876611f9b3e2aec9df0fd5b02df6
SHA25665e2068f1b95e75dacf2f40c04293e67e8b9da3713442c7f30cb19eadd143117
SHA5129d97c0fdbc5383c34e4c72dacc2e33c020c36a08ca3da28cf422bfdf610cbbf5bdca9e7b8140952794b2e17eb9c03136081c7897dcd81d4bcb953cf9247b1c64