4f8d8ea9646d4e22bde910ff285f60de42280dc778202bda1dc326f5a9244f4b

Submit
Reports

Overview

overview

Static

static

0908-explo...ry.pdf

windows7-x64

0908-explo...ry.pdf

windows10-2004-x64

0908-explo...on.pdf

windows7-x64

0908-explo...on.pdf

windows10-2004-x64

0908-explo...on.pdf

windows7-x64

0908-explo...on.pdf

windows10-2004-x64

SkypeTroja...an.vbs

windows7-x64

SkypeTroja...an.vbs

windows10-2004-x64

0908-explo...ry.pdf

windows7-x64

0908-explo...ry.pdf

windows10-2004-x64

0908-explo...on.pdf

windows7-x64

0908-explo...on.pdf

windows10-2004-x64

0908-explo...ow.txt

ubuntu-18.04-amd64

0908-explo...ow.txt

debian-9-armhf

0908-explo...ow.txt

debian-9-mips

0908-explo...ow.txt

debian-9-mipsel

0908-explo...xss.js

windows7-x64

0908-explo...xss.js

windows10-2004-x64

0908-explo...sh.txt

ubuntu-18.04-amd64

0908-explo...sh.txt

debian-9-armhf

0908-explo...sh.txt

debian-9-mips

0908-explo...sh.txt

debian-9-mipsel

0908-explo...ow.txt

ubuntu-18.04-amd64

0908-explo...ow.txt

debian-9-armhf

0908-explo...ow.txt

debian-9-mips

0908-explo...ow.txt

debian-9-mipsel

0908-explo...ql.ps1

windows7-x64

0908-explo...ql.ps1

windows10-2004-x64

0908-explo...ql.txt

ubuntu-18.04-amd64

0908-explo...ql.txt

debian-9-armhf

0908-explo...ql.txt

debian-9-mips

0908-explo...ql.txt

debian-9-mipsel

Analysis

max time kernel
242s
max time network
48s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
27/11/2022, 18:15

Sharing

Copy URL Twitter E-mail

Static task

static1

pdf link

2 signatures

Behavioral task

behavioral1

Sample

0908-exploits/CoolPreviews_Firefox_Extension_Security_Advisory.pdf

Resource

win7-20221111-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

0908-exploits/CoolPreviews_Firefox_Extension_Security_Advisory.pdf

Resource

win10v2004-20220901-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

0908-exploits/Feed_Sidebar_Firefox_Extension_Privileged_Code_Injection.pdf

Resource

win7-20221111-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

0908-exploits/Feed_Sidebar_Firefox_Extension_Privileged_Code_Injection.pdf

Resource

win10v2004-20220901-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral5

Sample

0908-exploits/ScribeFire_Firefox_Extension_Privileged_Code_Injection.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

0908-exploits/ScribeFire_Firefox_Extension_Privileged_Code_Injection.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral7

Sample

SkypeTrojan/SkypeTrojan.vbs

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

SkypeTrojan/SkypeTrojan.vbs

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

0908-exploits/Update_Scanner_Firefox_Extension_Security_Advisory.pdf

Resource

win7-20221111-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

0908-exploits/Update_Scanner_Firefox_Extension_Security_Advisory.pdf

Resource

win10v2004-20221111-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral11

Sample

0908-exploits/WizzRSS_Firefox_Extension_Privileged_Code_Injection.pdf

Resource

win7-20221111-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

0908-exploits/WizzRSS_Firefox_Extension_Privileged_Code_Injection.pdf

Resource

win10v2004-20221111-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral13

Sample

0908-exploits/a2mpp-overflow.txt

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

0908-exploits/a2mpp-overflow.txt

Resource

debian9-armhf-en-20211208

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

0908-exploits/a2mpp-overflow.txt

Resource

debian9-mipsbe-20221111-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

0908-exploits/a2mpp-overflow.txt

Resource

debian9-mipsel-en-20211208

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

0908-exploits/adobeflex-xss.js

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

0908-exploits/adobeflex-xss.js

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

0908-exploits/aio-crash.txt

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

0908-exploits/aio-crash.txt

Resource

debian9-armhf-20221111-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

0908-exploits/aio-crash.txt

Resource

debian9-mipsbe-20221111-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

0908-exploits/aio-crash.txt

Resource

debian9-mipsel-en-20211208

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

0908-exploits/amayaw3c-overflow.txt

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

0908-exploits/amayaw3c-overflow.txt

Resource

debian9-armhf-en-20211208

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

0908-exploits/amayaw3c-overflow.txt

Resource

debian9-mipsbe-20221111-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

0908-exploits/amayaw3c-overflow.txt

Resource

debian9-mipsel-en-20211208

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

0908-exploits/arabportal2-sql.ps1

Resource

win7-20221111-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

0908-exploits/arabportal2-sql.ps1

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

0908-exploits/arabportal22-sql.txt

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

0908-exploits/arabportal22-sql.txt

Resource

debian9-armhf-en-20211208

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

0908-exploits/arabportal22-sql.txt

Resource

debian9-mipsbe-20221111-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

0908-exploits/arabportal22-sql.txt

Resource

debian9-mipsel-en-20211208

debian-9-mipsel

0 signatures

150 seconds

Report Analysis Logs

General

Target

0908-exploits/CoolPreviews_Firefox_Extension_Security_Advisory.pdf
Size

268KB
MD5

6a6adc238f22333a79d378d631684384
SHA1

cfb8863b303f3e69f58a238477dc12cf2f22b7d8
SHA256

4f2706bad6a05c9cdd2540149bff931f39721d5ed60c8ef6695a3e216f3e75b8
SHA512

e6a06c7d9ae1f5aec527ff81c95923f8b746238975fd8f93cb1688b47ebccdab5244ed907c52a29070002436eb2fd50e2be84d065b686e5d22d9a06584bccaf3
SSDEEP

3072:ZX7QAI2GwHBDqfK40F0JBBdDGLAAI2GwHBDq2K40F0JBBdD3LAT/PgcIKn9cgm:uEHkfMmRd4XHk2MmRdHUb+gm

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
580	AcroRd32.exe
580	AcroRd32.exe
580	AcroRd32.exe
580	AcroRd32.exe

Processes

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0908-exploits\CoolPreviews_Firefox_Extension_Security_Advisory.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/580-54-0x00000000766F1000-0x00000000766F3000-memory.dmp

Filesize
8KB

Download