Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
03/06/2024, 15:46
General
-
Target
AIR FORCE/Polaris_Draft_SOW_1_Jun_2017.pdf
-
Size
319KB
-
MD5
e16f3b89dd68e07121e380ae2d6a4354
-
SHA1
31209a9c945d7db5014023eeb8009af145c0b8a5
-
SHA256
998ecbcc2280a2eebb898ce12bbd313e4974bc76ecf80b5d284dab5bd6487c80
-
SHA512
d50485c08d88909db2b90c0eabd84dbd38d6af1836fb01b6ea8d846b83b197bfa2c731da0ce4a12e45179a7edf6e13b9a5eb02f35134d225bafdfa36b3363cab
-
SSDEEP
6144:MMq6EVB79QmuJjdmU6ZYlVqzcD4xz7OBycjrJ4qBFwscAcmo9BhBMt5Upqcz5SZ9:SlhQTNg0lAzcDPycjre4FwstPOjBVpNc
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\AIR FORCE\Polaris_Draft_SOW_1_Jun_2017.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d9b74196f70849c58eac9ddc0a52e9a1
SHA15ba67838ab90e0cec61bf7afaf6880d69cd15bc0
SHA2562f0b1946319ab6ad74bb912680a97c54bbb8360fba9d52b306e5f2c6fe8ed31b
SHA51253aa4ea0cad67f5aebeadc982e17c0774f461bdf1016989ba136aafea27aa17257daddf6f64fa353f721f9c0ce780c3824302c675e7e535df510a8aba886c24d