Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22-06-2024 16:41

General

  • Target

    Manulife Investment Management Consent Docs#455435(Revised).pdf

  • Size

    70KB

  • MD5

    22c40fe7135c5f814a8022f7703ff5e6

  • SHA1

    5687094570de5edf3d33e0c6d20bfba02d9483be

  • SHA256

    b51c7d1de410fb0b5ddbe68d4cefa302ad3d1d6dc9797dec8b627b621c7580e3

  • SHA512

    04ca6616bb0450ae431d07c9172d372f79a1921fd25fc590275068473d7d8ce9860a8442cbbcace5b248cbf05100d4859324220bb801d4fbd754f883528bd9d7

  • SSDEEP

    1536:9oBpNyNL+NI38jF+juVqyuNKpTZ1MxboK2b49W0Df:+BiLw+juVsAp/M6K2b4lDf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Manulife Investment Management Consent Docs#455435(Revised).pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5e591b01ef7854467ff85cd264f801ac

    SHA1

    35589bffae0a956ff191afefbefd091a2775e8ef

    SHA256

    31b2a09329d8419a3d0543bb4d561c3d436a0113d145b51440c3883dda8f688d

    SHA512

    4a0a045309b05e29f2f93dd713f9b91efc06624d1d4be569d3ff662ce103c051d74eaa4410e8c466775573153887710d0e86b07dfcf3223b521b5d3f796b57da