Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    30-06-2024 04:21

General

  • Target

    FAIRTIQ_2024-06-30_zANqBXzAK5t7WfPC4i.pdf

  • Size

    55KB

  • MD5

    18c54b2304a2509e7b0e3a8ec7f81e83

  • SHA1

    0fd7d5d42abf363c056198b7478099a4af53b3f2

  • SHA256

    7f526b940aaa4f636ff9efc11d4a32dcccc8d04e8c4b09c313fdb70508ed0f78

  • SHA512

    4e7a4cd85ff52fa586ca81e7acb252e179af61052a44bdfc8739168d7d8f07b71d0daf714a9665e58f2fd04251c762d26afab4c15b0f14ae62c9b6498d054778

  • SSDEEP

    768:1ZwDtimXKzahq8hXCBU5jYoZZ89pPyyMzffN4yRoKqoDWsApWXdhcgIsYssssss9:1Zw7XYkq6SQYikqyMzffOAv6L3XLn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\FAIRTIQ_2024-06-30_zANqBXzAK5t7WfPC4i.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    36ec22549b5fa08a4ebb1ff3836216ba

    SHA1

    3cbe0e17df6ca5867fb340653bfb3d53147d7836

    SHA256

    28f9cd73163a5ccf67e79ff7b0f9ba87885999aa1adf3c711feeee8bb18c9208

    SHA512

    eb65b0e695f5ef7a418d0d809a1c8a9a786f265be65506247af03eccea997a463229525ce6b13ec12793fb7152f9d5dc8a32e788d698e27681326072c86b38d5