Overview
overview
10Static
static
3Kiddions_m...nu.exe
windows7-x64
10Kiddions_m...nu.exe
windows10-2004-x64
10Kiddions_m...d.html
windows7-x64
1Kiddions_m...d.html
windows10-2004-x64
1Kiddions_m...typing
ubuntu-18.04-amd64
1Kiddions_m...typing
debian-9-armhf
1Kiddions_m...typing
debian-9-mips
1Kiddions_m...typing
debian-9-mipsel
1Kiddions_m...ry.pdf
windows7-x64
1Kiddions_m...ry.pdf
windows10-2004-x64
1Kiddions_m...ck.exe
windows7-x64
7Kiddions_m...ck.exe
windows10-2004-x64
7Kiddions_m...ng.pdf
windows7-x64
1Kiddions_m...ng.pdf
windows10-2004-x64
1Kiddions_m...er.pdf
windows7-x64
1Kiddions_m...er.pdf
windows10-2004-x64
1Kiddions_m...er.pdf
windows7-x64
1Kiddions_m...er.pdf
windows10-2004-x64
1Kiddions_m...ic.pdf
windows7-x64
1Kiddions_m...ic.pdf
windows10-2004-x64
1Kiddions_m...ne.pdf
windows7-x64
1Kiddions_m...ne.pdf
windows10-2004-x64
1Kiddions_m...rt.pdf
windows7-x64
1Kiddions_m...rt.pdf
windows10-2004-x64
1Kiddions_m...ed.pdf
windows7-x64
1Kiddions_m...ed.pdf
windows10-2004-x64
1Kiddions_m...an.pdf
windows7-x64
1Kiddions_m...an.pdf
windows10-2004-x64
1Kiddions_m...on.pdf
windows7-x64
1Kiddions_m...on.pdf
windows10-2004-x64
1Kiddions_m...ne.pdf
windows7-x64
1Kiddions_m...ne.pdf
windows10-2004-x64
1Analysis
-
max time kernel
209s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
02-12-2022 06:51
Behavioral task
behavioral1
Sample
Kiddions_menu/Kiddions_menu.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Kiddions_menu/Kiddions_menu.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Kiddions_menu/Readme.md/lib/pdf/reader/afm/MustRead.html
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Kiddions_menu/Readme.md/lib/pdf/reader/afm/MustRead.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
Kiddions_menu/Readme.md/scripts/require-strict-typing
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral6
Sample
Kiddions_menu/Readme.md/scripts/require-strict-typing
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral7
Sample
Kiddions_menu/Readme.md/scripts/require-strict-typing
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral8
Sample
Kiddions_menu/Readme.md/scripts/require-strict-typing
Resource
debian9-mipsel-20221111-en
Behavioral task
behavioral9
Sample
Kiddions_menu/Readme.md/spec/data/20070313 - 2nd Laptop Battery.pdf
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
Kiddions_menu/Readme.md/spec/data/20070313 - 2nd Laptop Battery.pdf
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
Kiddions_menu/Readme.md/spec/data/Genshin Impact hack.exe
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
Kiddions_menu/Readme.md/spec/data/Genshin Impact hack.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
Kiddions_menu/Readme.md/spec/data/TJ_and_char_spacing.pdf
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
Kiddions_menu/Readme.md/spec/data/TJ_and_char_spacing.pdf
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
Kiddions_menu/Readme.md/spec/data/TJ_starts_with_a_number.pdf
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
Kiddions_menu/Readme.md/spec/data/TJ_starts_with_a_number.pdf
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
Kiddions_menu/Readme.md/spec/data/ascii85_filter.pdf
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
Kiddions_menu/Readme.md/spec/data/ascii85_filter.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
Kiddions_menu/Readme.md/spec/data/cairo-basic.pdf
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
Kiddions_menu/Readme.md/spec/data/cairo-basic.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
Kiddions_menu/Readme.md/spec/data/cairo-multiline.pdf
Resource
win7-20220901-en
Behavioral task
behavioral22
Sample
Kiddions_menu/Readme.md/spec/data/cairo-multiline.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
Kiddions_menu/Readme.md/spec/data/cairo-unicode-short.pdf
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
Kiddions_menu/Readme.md/spec/data/cairo-unicode-short.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
Kiddions_menu/Readme.md/spec/data/clearscan-with-image-removed.pdf
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
Kiddions_menu/Readme.md/spec/data/clearscan-with-image-removed.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
Kiddions_menu/Readme.md/spec/data/clearscan.pdf
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
Kiddions_menu/Readme.md/spec/data/clearscan.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
Kiddions_menu/Readme.md/spec/data/column_integration.pdf
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
Kiddions_menu/Readme.md/spec/data/column_integration.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
Kiddions_menu/Readme.md/spec/data/content_stream_begins_with_newline.pdf
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
Kiddions_menu/Readme.md/spec/data/content_stream_begins_with_newline.pdf
Resource
win10v2004-20220812-en
General
-
Target
Kiddions_menu/Readme.md/spec/data/clearscan-with-image-removed.pdf
-
Size
21KB
-
MD5
e23e6771ff494e4c16a4c58a72c36aea
-
SHA1
0c86038cd9cbcbeddcf4a7023aed320d86f0241f
-
SHA256
9d8e3994e70d41ebc1bb0ecdb0fdaf133c0d6701f743e933f9666b9f40faa4e7
-
SHA512
5619a833a7e86fa50b995bdb062c3517dc6cc9335a5c5ad968b1fe5bb991bd987f72f007438a1088c3316ec5d033aeb0a7755f4d7e98f0db452a9b937adba986
-
SSDEEP
384:9Bbq41koLiBkayWMhpVQQdV8xgkTBZshB8qlzljlYIl2WcQzyL3g:9Y417iuZhjQQyguZsMqlzljlYIl2WDys
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1760 AcroRd32.exe 1760 AcroRd32.exe 1760 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1760-54-0x0000000075141000-0x0000000075143000-memory.dmpFilesize
8KB