Analysis
-
max time kernel
122s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
11-06-2024 14:51
General
-
Target
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-en.pdf
-
Size
515KB
-
MD5
ec5c9a75bb6827cf43fbb35cedd82bcf
-
SHA1
a616127f9ed156163220c5d4c0e0124c184a0e73
-
SHA256
35b03399b3b837e70d51c97dbf1be1de2ee6a59f20eb314de459c8ff27fb7dfa
-
SHA512
a05672223ae9f97b7c06e36fae9b02065cbc7018b8fabb35a9149484cdbe5be013bdcfabe69723d24b5d303078b9f017a6fd7c993a0fe966d976c78a900c9056
-
SSDEEP
12288:JJSK3qMtRxtiIPcmNjviT3pMCmqHHtev+p3WoT4:zSaqrIkmRiTqoIv+NWoM
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\CADe_SIMU V4.2\Nettoplcsim-S7o-v-1-1-0-0\doc\NetToPLCsim-Manual-en.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD532dcd6ab50154d0e3a679d7a8fdf340b
SHA1fe028f1730c9e72a1973ee3f277289896e92dd95
SHA256171980a3d44a900851591438e0f28ddb6874b5bdb8eb43504b119fe935ee3efb
SHA512605a4aa571bb8b2bcea695ac983e12a883a0b72ea2e16ee04f99492b9dfb0fcbce9ea40a4a6bebb51e3d83588d69df18f573662a4ecf2dd5294a60216360070e