Overview
overview
10Static
static
3Kiddions_m...nu.exe
windows7-x64
10Kiddions_m...nu.exe
windows10-2004-x64
10Kiddions_m...d.html
windows7-x64
1Kiddions_m...d.html
windows10-2004-x64
1Kiddions_m...typing
ubuntu-18.04-amd64
1Kiddions_m...typing
debian-9-armhf
1Kiddions_m...typing
debian-9-mips
1Kiddions_m...typing
debian-9-mipsel
1Kiddions_m...ry.pdf
windows7-x64
1Kiddions_m...ry.pdf
windows10-2004-x64
1Kiddions_m...ck.exe
windows7-x64
7Kiddions_m...ck.exe
windows10-2004-x64
7Kiddions_m...ng.pdf
windows7-x64
1Kiddions_m...ng.pdf
windows10-2004-x64
1Kiddions_m...er.pdf
windows7-x64
1Kiddions_m...er.pdf
windows10-2004-x64
1Kiddions_m...er.pdf
windows7-x64
1Kiddions_m...er.pdf
windows10-2004-x64
1Kiddions_m...ic.pdf
windows7-x64
1Kiddions_m...ic.pdf
windows10-2004-x64
1Kiddions_m...ne.pdf
windows7-x64
1Kiddions_m...ne.pdf
windows10-2004-x64
1Kiddions_m...rt.pdf
windows7-x64
1Kiddions_m...rt.pdf
windows10-2004-x64
1Kiddions_m...ed.pdf
windows7-x64
1Kiddions_m...ed.pdf
windows10-2004-x64
1Kiddions_m...an.pdf
windows7-x64
1Kiddions_m...an.pdf
windows10-2004-x64
1Kiddions_m...on.pdf
windows7-x64
1Kiddions_m...on.pdf
windows10-2004-x64
1Kiddions_m...ne.pdf
windows7-x64
1Kiddions_m...ne.pdf
windows10-2004-x64
1Analysis
-
max time kernel
228s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
02-12-2022 06:51
Behavioral task
behavioral1
Sample
Kiddions_menu/Kiddions_menu.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Kiddions_menu/Kiddions_menu.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Kiddions_menu/Readme.md/lib/pdf/reader/afm/MustRead.html
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Kiddions_menu/Readme.md/lib/pdf/reader/afm/MustRead.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
Kiddions_menu/Readme.md/scripts/require-strict-typing
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral6
Sample
Kiddions_menu/Readme.md/scripts/require-strict-typing
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral7
Sample
Kiddions_menu/Readme.md/scripts/require-strict-typing
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral8
Sample
Kiddions_menu/Readme.md/scripts/require-strict-typing
Resource
debian9-mipsel-20221111-en
Behavioral task
behavioral9
Sample
Kiddions_menu/Readme.md/spec/data/20070313 - 2nd Laptop Battery.pdf
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
Kiddions_menu/Readme.md/spec/data/20070313 - 2nd Laptop Battery.pdf
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
Kiddions_menu/Readme.md/spec/data/Genshin Impact hack.exe
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
Kiddions_menu/Readme.md/spec/data/Genshin Impact hack.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
Kiddions_menu/Readme.md/spec/data/TJ_and_char_spacing.pdf
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
Kiddions_menu/Readme.md/spec/data/TJ_and_char_spacing.pdf
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
Kiddions_menu/Readme.md/spec/data/TJ_starts_with_a_number.pdf
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
Kiddions_menu/Readme.md/spec/data/TJ_starts_with_a_number.pdf
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
Kiddions_menu/Readme.md/spec/data/ascii85_filter.pdf
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
Kiddions_menu/Readme.md/spec/data/ascii85_filter.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
Kiddions_menu/Readme.md/spec/data/cairo-basic.pdf
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
Kiddions_menu/Readme.md/spec/data/cairo-basic.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
Kiddions_menu/Readme.md/spec/data/cairo-multiline.pdf
Resource
win7-20220901-en
Behavioral task
behavioral22
Sample
Kiddions_menu/Readme.md/spec/data/cairo-multiline.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
Kiddions_menu/Readme.md/spec/data/cairo-unicode-short.pdf
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
Kiddions_menu/Readme.md/spec/data/cairo-unicode-short.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
Kiddions_menu/Readme.md/spec/data/clearscan-with-image-removed.pdf
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
Kiddions_menu/Readme.md/spec/data/clearscan-with-image-removed.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
Kiddions_menu/Readme.md/spec/data/clearscan.pdf
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
Kiddions_menu/Readme.md/spec/data/clearscan.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
Kiddions_menu/Readme.md/spec/data/column_integration.pdf
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
Kiddions_menu/Readme.md/spec/data/column_integration.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
Kiddions_menu/Readme.md/spec/data/content_stream_begins_with_newline.pdf
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
Kiddions_menu/Readme.md/spec/data/content_stream_begins_with_newline.pdf
Resource
win10v2004-20220812-en
General
-
Target
Kiddions_menu/Readme.md/spec/data/20070313 - 2nd Laptop Battery.pdf
-
Size
27KB
-
MD5
be3427795b673615e42f89b9043d44d9
-
SHA1
9cf4b4b3f312894a0a49157c40ca623a7c1b5fb2
-
SHA256
764d06d90fa96d89f770693bf91e165a433d2f86786174f88f2590e24549593d
-
SHA512
95d45928874c2932c44149c86ea45e86591dbbc1fef1f1ae52a9d45ca3d8a166c8ebbc0cdd06c0fcc102174b4015095417ec91677951eb414dd40ca188d85571
-
SSDEEP
768:R+fCGsC2nhdy/SwZkcjNTar+e0X6huWzjwXBs6RW7v5E8b:AsC2S/Hk03VT66VcdZb
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 1344 AcroRd32.exe 1344 AcroRd32.exe 1344 AcroRd32.exe 1344 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1344-54-0x0000000075B61000-0x0000000075B63000-memory.dmpFilesize
8KB