Overview
overview
8Static
static
8EES Aprend...ow.chm
windows7-x64
1EES Aprend...ow.chm
windows10-2004-x64
1EES Aprend...on.chm
windows7-x64
1EES Aprend...on.chm
windows10-2004-x64
1EES Aprend...ow.chm
windows7-x64
1EES Aprend...ow.chm
windows10-2004-x64
1EES Aprend...gs.chm
windows7-x64
1EES Aprend...gs.chm
windows10-2004-x64
1EES Aprend...mi.chm
windows7-x64
1EES Aprend...mi.chm
windows10-2004-x64
1EES Aprend...cy.chm
windows7-x64
1EES Aprend...cy.chm
windows10-2004-x64
1EES Aprend...or.chm
windows7-x64
1EES Aprend...or.chm
windows10-2004-x64
1EES Aprend...rs.chm
windows7-x64
1EES Aprend...rs.chm
windows10-2004-x64
1EES Aprend...HX.chm
windows7-x64
1EES Aprend...HX.chm
windows10-2004-x64
1EES Aprend...es.chm
windows7-x64
1EES Aprend...es.chm
windows10-2004-x64
1EES Aprend...ce.doc
windows7-x64
4EES Aprend...ce.doc
windows10-2004-x64
1EES Aprend...ce.pdf
windows7-x64
1EES Aprend...ce.pdf
windows10-2004-x64
1EES Aprend...23.dll
windows7-x64
3EES Aprend...23.dll
windows10-2004-x64
3EES Aprend...lo.dll
windows7-x64
3EES Aprend...lo.dll
windows10-2004-x64
3EES Aprend...rs.chm
windows7-x64
1EES Aprend...rs.chm
windows10-2004-x64
1EES Aprend...es.chm
windows7-x64
1EES Aprend...es.chm
windows10-2004-x64
1Analysis
-
max time kernel
154s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
12-03-2023 20:06
Behavioral task
behavioral1
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Convection/external_flow.chm
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Convection/external_flow.chm
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Convection/free_convection.chm
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Convection/free_convection.chm
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Convection/internal_flow.chm
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Convection/internal_flow.chm
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Convection/regenerator_packings.chm
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Convection/regenerator_packings.chm
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Emissivity/Emissivity_TotHemi.chm
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Emissivity/Emissivity_TotHemi.chm
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Fin Efficiency/fin efficiency.chm
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Fin Efficiency/fin efficiency.chm
Resource
win10v2004-20230221-en
Behavioral task
behavioral13
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Fouling Factors/FoulingFactor.chm
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Fouling Factors/FoulingFactor.chm
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Heat Exchangers/Heat Exchangers.chm
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Heat Exchangers/Heat Exchangers.chm
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Heat Exchangers/NumericalHX.chm
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Heat Exchangers/NumericalHX.chm
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Minor Losses/minor losses.chm
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Minor Losses/minor losses.chm
Resource
win10v2004-20230221-en
Behavioral task
behavioral21
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Radiation Properties/gas emittance.doc
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Radiation Properties/gas emittance.doc
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Radiation Properties/gas emittance.pdf
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Radiation Properties/gas emittance.pdf
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Radiation View Factors/F3d7123.dll
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Radiation View Factors/F3d7123.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Radiation View Factors/MonteCarlo.dll
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Radiation View Factors/MonteCarlo.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Radiation View Factors/view factors.chm
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Radiation View Factors/view factors.chm
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Reference Tables/Reference Tables.chm
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Reference Tables/Reference Tables.chm
Resource
win10v2004-20230220-en
General
-
Target
EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Radiation Properties/gas emittance.pdf
-
Size
161KB
-
MD5
2bb754288cb97bd7d52bacd39d569448
-
SHA1
9e3313b3a0e8747ab5ec725a46d85269ee576016
-
SHA256
6ffa40d9b0f63c3e6f2c89ced599ba4008a7b30caeefff168f6e0d295a0de1c0
-
SHA512
345c5212f1ad4ca3b21075b0528bbfdead2a8317a6fa536647d552e7d836fbb6f9eaa45bce8abb332b9a3a9da99009870f919d0ff80383e2828bf5c459d85ec4
-
SSDEEP
3072:qwmrYOKjwRLBDyN9ShFT90zXr/r+aYwEw3TLlpcEOmX2taJcUYLJN0Q8S:qR0O15VyNcH9GXr/r+1wHEEOmwRD0m
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 1544 AcroRd32.exe 1544 AcroRd32.exe 1544 AcroRd32.exe 1544 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\EES Aprende.Química.e.Ingeniería.con.Toño\Userlib\Heat Transfer\Radiation Properties\gas emittance.pdf"1⤵
- Suspicious use of SetWindowsHookEx
PID:1544