Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    11-08-2024 11:20

General

  • Target

    Voxengo Primary User Guide en.pdf

  • Size

    718KB

  • MD5

    498f20c783ba8aa1933f14bce3e3e624

  • SHA1

    2404e09bc5897d9e113f6647c89c5da1fd70774d

  • SHA256

    5887433efe6f65010ffc47e839dfd77ffba1d47af1ddc362aa0a9bb905796f85

  • SHA512

    196953ea65fbc4d384adc4043b05cd70bb59f773ae3b99fe580306f4a7da9be3fa87213eec3c5d7e78360b6059a1a3140dad55f8e925a19e134cc8f25b3de86b

  • SSDEEP

    12288:gr2FToSekuUK4xQ99X7n299TZNFu+avfJgTiFyib90/Bqm:gr2ZoSXlxxQfX7ek5r4ib92j

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Voxengo Primary User Guide en.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2748

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d67ea7c5f3c447902e58f57e0db06b3f

    SHA1

    167a28dad51de5d63812907040004d4136910577

    SHA256

    f74a63a296982214e7f556450e2d265d3894f5f87d7ab6febbc7a94d03794614

    SHA512

    3d458cc4a7abf6ffbb039755fc40c35a708e9b90cd999a977d1a95815ce77f53d986b96bdd029707813ef336495af53ae82ea7e8e70681c099d0516608461bc6