Overview
overview
5Static
static
3OneLegalOr...43.zip
windows7_x64
1OneLegalOr...43.zip
windows10-2004_x64
1OneLegalOr...d].pdf
windows7_x64
1OneLegalOr...d].pdf
windows10-2004_x64
1OneLegalOr...l].pdf
windows7_x64
1OneLegalOr...l].pdf
windows10-2004_x64
1OneLegalOr...PA.pdf
windows7_x64
1OneLegalOr...PA.pdf
windows10-2004_x64
5OneLegalOr...tn.pdf
windows7_x64
1OneLegalOr...tn.pdf
windows10-2004_x64
1OneLegalOr...OS.pdf
windows7_x64
1OneLegalOr...OS.pdf
windows10-2004_x64
1OneLegalOr...op.pdf
windows7_x64
1OneLegalOr...op.pdf
windows10-2004_x64
1Analysis
-
max time kernel
150s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
05-05-2022 20:55
Behavioral task
behavioral1
Sample
OneLegalOrder_17895443.zip
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
OneLegalOrder_17895443.zip
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
OneLegalOrder_17895443/Decl [redacted].pdf
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
OneLegalOrder_17895443/Decl [redacted].pdf
Resource
win10v2004-20220414-en
Behavioral task
behavioral5
Sample
OneLegalOrder_17895443/Decl [under seal].pdf
Resource
win7-20220414-en
Behavioral task
behavioral6
Sample
OneLegalOrder_17895443/Decl [under seal].pdf
Resource
win10v2004-20220414-en
Behavioral task
behavioral7
Sample
OneLegalOrder_17895443/MPA.pdf
Resource
win7-20220414-en
Behavioral task
behavioral8
Sample
OneLegalOrder_17895443/MPA.pdf
Resource
win10v2004-20220414-en
Behavioral task
behavioral9
Sample
OneLegalOrder_17895443/Mtn.pdf
Resource
win7-20220414-en
Behavioral task
behavioral10
Sample
OneLegalOrder_17895443/Mtn.pdf
Resource
win10v2004-20220414-en
Behavioral task
behavioral11
Sample
OneLegalOrder_17895443/POS.pdf
Resource
win7-20220414-en
Behavioral task
behavioral12
Sample
OneLegalOrder_17895443/POS.pdf
Resource
win10v2004-20220414-en
Behavioral task
behavioral13
Sample
OneLegalOrder_17895443/Prop.pdf
Resource
win7-20220414-en
Behavioral task
behavioral14
Sample
OneLegalOrder_17895443/Prop.pdf
Resource
win10v2004-20220414-en
General
-
Target
OneLegalOrder_17895443/MPA.pdf
-
Size
170KB
-
MD5
576222ae105a3ca13246415b441fa715
-
SHA1
803284516ab80a3c7a4339359281ea113c92c2d8
-
SHA256
9658b5fda794f38b043268f127ffc8d48ccf7d85cc3c0cf869173b01533a30b3
-
SHA512
f52556edff06bcd97a5405d833c67b8a1f77acad4fb934c1d08003cc2dc287ac8c05bf3ef0b1a38ba6690bf8167f287e3815da2b56b67ad081909309ddccf9da
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2044 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2044 AcroRd32.exe 2044 AcroRd32.exe 2044 AcroRd32.exe 2044 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2044-54-0x0000000075441000-0x0000000075443000-memory.dmpFilesize
8KB