Analysis

  • max time kernel
    94s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    11/07/2024, 06:37

General

  • Target

    cvery.comvc91453453634/osd/SDKbook.pdf

  • Size

    761KB

  • MD5

    99a2df2b18aef2d53ed154a0a3d52c42

  • SHA1

    7008f959f48a09170d8b0d381f474602e75d9749

  • SHA256

    9c04065ef78ecf63b90d6d3f238901517d2fd5214bbc6bf2dd3fc6531e159014

  • SHA512

    d816be739dd371f91cb63cadd3335a5e5847f98262f37ef6d0f4759b21dcece762e4eef7e7e344987c9b5d8e9ca6302e5766b1e10bb32d8d0d2c7dd50f51951d

  • SSDEEP

    12288:dY3QJTpDhy9yKRGb2OD/c9TpBrOypBwSvMRzL0NCF8+iAZWFaTB4k1Ce+D:dHJTpDhy9yH6ODkTPOypvCYIF8+/ipew

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cvery.comvc91453453634\osd\SDKbook.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3040

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d4b15b64a1a42d8436db6bb4c3249c83

          SHA1

          9d750c837139681833918476bc3403893522ed4a

          SHA256

          0edee5ee96209d555b04befdcdda77bfd8e6f6812ae65fe419e51db44774b48c

          SHA512

          2380f68c7d9789a13a46bd2e7fd6e76127a12a7aab4148672832713d1db22da49059c1d59e44ae1838f3702040d1be99b4bdd073c6091d076dccee3792e51bee