Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15-06-2024 06:23

General

  • Target

    reservation_6905_walter_wenger.pdf

  • Size

    82KB

  • MD5

    48132b0fdf45f13348b1d20db6f309b2

  • SHA1

    1c54cac5d056affbae8a2e0b796255ce107d9f93

  • SHA256

    26bc06edaca388f4e17a4d97cd238b89b80dc26a08cdd79a0ba931fd9aca7ce7

  • SHA512

    d8de9d63b8d12665088e8f0cf0a99c3a6d596a77b1673c172569617d2e5e1310e4fe96e71def54a0c20d63bb7d4159a0f9efe44ff3d8f26e8b3bb1daa1c81a07

  • SSDEEP

    1536:wSiDpgCxldmsgdI9jCMBXVIeFEB7cBh/SirlR6oN5NCdQfh20RdWq:wSDCxbms/rwyh/Sij6k5NFfh20R9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\reservation_6905_walter_wenger.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7c092c23a56a14daa2ed47f9c44bb0c1

    SHA1

    f1c5c32a24495b5cde010214c6eb9dc7bb264f9b

    SHA256

    c89b51dc3969a256f54b04e0053c9ff46a87e30c4896d881d64bfe66e49ab2d3

    SHA512

    120fd33e930773944ff6a7f6f192b4c61644733624eec030835204c3cdde9187779fb3af0b3f59f7332b28579f5875682ecbb8a16d4be6cdf7572a0f5d65bd4c