Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
03/06/2024, 15:46
General
-
Target
AIR FORCE/DRAFT JNWC-IV-IDIQ Work Statement v. 1.pdf
-
Size
467KB
-
MD5
50153fceccba5ba913d3e2b4ac5307cf
-
SHA1
0117104d3711bbde72b1113642f17e5beb0cd130
-
SHA256
ad1cfd694764b133bd99502692d7a7ae80cf7ff14518e312304ec1b21ad9671a
-
SHA512
a587cf3ec68a2ae527bb0883a8eef96c18bd20c719551a405277bc6f4d6c50ccf0bf9e7abef792a442398206eca2128030d7afc60121bdf2bddeed40027dd96e
-
SSDEEP
12288:hiCYmLjV2CrpCuJRF9zFt+Xbnej8Ax7/OFN5c:SmLxTAiFcX7eIAx/ONe
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\AIR FORCE\DRAFT JNWC-IV-IDIQ Work Statement v. 1.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5de08c2869b401ab1d102d6786dc9f7ca
SHA1dab933f488d7181a650c11d8991e041dbd939615
SHA256c5c9123f4ddcb624db09429bc67562c3239a00863b947e6cdfab7c348c036afe
SHA5125454a404ef10c1ac3b304027212fc2782b29a74fe26c5e4676d81832a2e0f11941858ba55600ec26c3ccbf85e1779516eb2ed46aa6b01109d0ea4254efdeb366