Overview
overview
4Static
static
3Russian mb...gs.pdf
windows7-x64
1Russian mb...gs.pdf
windows10-2004-x64
1Russian mb...19.pdf
windows7-x64
1Russian mb...19.pdf
windows10-2004-x64
1Russian mb...B3.pdf
windows7-x64
1Russian mb...B3.pdf
windows10-2004-x64
1Russian mb...VM.pdf
windows7-x64
1Russian mb...VM.pdf
windows10-2004-x64
1Russian mb...al.pdf
windows7-x64
1Russian mb...al.pdf
windows10-2004-x64
4Russian mb...90.pdf
windows7-x64
1Russian mb...90.pdf
windows10-2004-x64
1Russian mb...2B.pdf
windows7-x64
1Russian mb...2B.pdf
windows10-2004-x64
1Russian mb...IA.pdf
windows7-x64
1Russian mb...IA.pdf
windows10-2004-x64
1Russian mb...ED.pdf
windows7-x64
1Russian mb...ED.pdf
windows10-2004-x64
1Russian mb..._1.pdf
windows7-x64
1Russian mb..._1.pdf
windows10-2004-x64
1Russian mb...al.pdf
windows7-x64
1Russian mb...al.pdf
windows10-2004-x64
1Russian mb...k1.pdf
windows7-x64
1Russian mb...k1.pdf
windows10-2004-x64
1Russian mb...k2.pdf
windows7-x64
1Russian mb...k2.pdf
windows10-2004-x64
1Russian mb...al.pdf
windows7-x64
1Russian mb...al.pdf
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
35s -
platform
windows7_x64 -
resource
win7-20230220-es -
resource tags
arch:x64arch:x86image:win7-20230220-eslocale:es-esos:windows7-x64systemwindows -
submitted
13-04-2023 16:15
Behavioral task
behavioral1
Sample
Russian mbts/125-mmtankguns2A46and2A46-1.TOandInstructionmanual.2A46.TO2.Albumofdrawings.pdf
Resource
win7-20230220-es
Behavioral task
behavioral2
Sample
Russian mbts/125-mmtankguns2A46and2A46-1.TOandInstructionmanual.2A46.TO2.Albumofdrawings.pdf
Resource
win10v2004-20230220-es
Behavioral task
behavioral3
Sample
Russian mbts/CleosRealm-2S19.pdf
Resource
win7-20230220-es
Behavioral task
behavioral4
Sample
Russian mbts/CleosRealm-2S19.pdf
Resource
win10v2004-20230220-es
Behavioral task
behavioral5
Sample
Russian mbts/CleosRealm-T72B3.pdf
Resource
win7-20230220-es
Behavioral task
behavioral6
Sample
Russian mbts/CleosRealm-T72B3.pdf
Resource
win10v2004-20230220-es
Behavioral task
behavioral7
Sample
Russian mbts/CleosRealm-T80BVM.pdf
Resource
win7-20230220-es
Behavioral task
behavioral8
Sample
Russian mbts/CleosRealm-T80BVM.pdf
Resource
win10v2004-20230220-es
Behavioral task
behavioral9
Sample
Russian mbts/CleosRealm-T80_manual.pdf
Resource
win7-20230220-es
Behavioral task
behavioral10
Sample
Russian mbts/CleosRealm-T80_manual.pdf
Resource
win10v2004-20230221-es
Behavioral task
behavioral11
Sample
Russian mbts/CleosRealm-T90.pdf
Resource
win7-20230220-es
Behavioral task
behavioral12
Sample
Russian mbts/CleosRealm-T90.pdf
Resource
win10v2004-20230220-es
Behavioral task
behavioral13
Sample
Russian mbts/DevicetankT72B.pdf
Resource
win7-20230220-es
Behavioral task
behavioral14
Sample
Russian mbts/DevicetankT72B.pdf
Resource
win10v2004-20230220-es
Behavioral task
behavioral15
Sample
Russian mbts/T-72_CIA.pdf
Resource
win7-20230220-es
Behavioral task
behavioral16
Sample
Russian mbts/T-72_CIA.pdf
Resource
win10v2004-20230220-es
Behavioral task
behavioral17
Sample
Russian mbts/TankT-64.Object434.Technicaldescriptionandoperatinginstructions-CAPTURED.pdf
Resource
win7-20230220-es
Behavioral task
behavioral18
Sample
Russian mbts/TankT-64.Object434.Technicaldescriptionandoperatinginstructions-CAPTURED.pdf
Resource
win10v2004-20230220-es
Behavioral task
behavioral19
Sample
Russian mbts/TankT-80BTechnicaldescriptionandinstructionmanual-CAPTURED_1.pdf
Resource
win7-20230220-es
Behavioral task
behavioral20
Sample
Russian mbts/TankT-80BTechnicaldescriptionandinstructionmanual-CAPTURED_1.pdf
Resource
win10v2004-20230221-es
Behavioral task
behavioral21
Sample
Russian mbts/TankT72B.Usermanual.pdf
Resource
win7-20230220-es
Behavioral task
behavioral22
Sample
Russian mbts/TankT72B.Usermanual.pdf
Resource
win10v2004-20230221-es
Behavioral task
behavioral23
Sample
Russian mbts/TankT72S.Catalogofpartsandassemblyunits.book1.pdf
Resource
win7-20230220-es
Behavioral task
behavioral24
Sample
Russian mbts/TankT72S.Catalogofpartsandassemblyunits.book1.pdf
Resource
win10v2004-20230220-es
Behavioral task
behavioral25
Sample
Russian mbts/TankT72S.Catalogofpartsandassemblyunits.book2.pdf
Resource
win7-20230220-es
Behavioral task
behavioral26
Sample
Russian mbts/TankT72S.Catalogofpartsandassemblyunits.book2.pdf
Resource
win10v2004-20230220-es
Behavioral task
behavioral27
Sample
Russian mbts/t-72b-russian-main-battle-tank-technical-manual.pdf
Resource
win7-20230220-es
Behavioral task
behavioral28
Sample
Russian mbts/t-72b-russian-main-battle-tank-technical-manual.pdf
Resource
win10v2004-20230220-es
General
-
Target
Russian mbts/125-mmtankguns2A46and2A46-1.TOandInstructionmanual.2A46.TO2.Albumofdrawings.pdf
-
Size
4.5MB
-
MD5
7b43446a452a71a0035e607f080a2d60
-
SHA1
def32564d8da60d998410eec3ea55af4ccd6cc60
-
SHA256
08b499b2bc5afc4c5b685e7a80faa8628e518e8e612f1c14a3c17fa44a77bd11
-
SHA512
2f9b9dc329d6afb27bbcff9c2fdc37e852df8476bb0ddf6d9603a702d118bd1fe4ec791299eb3d310782ffd4dd2794f1001701bd611eb53bec9d8a71b3931209
-
SSDEEP
98304:1wVmnfoCW1tBaeGPdZmKQK7ED6WTxZHq8mAd+Biovq1:1w4nfoFbUfqD3fDEK
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 852 AcroRd32.exe 852 AcroRd32.exe 852 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Russian mbts\125-mmtankguns2A46and2A46-1.TOandInstructionmanual.2A46.TO2.Albumofdrawings.pdf"1⤵
- Suspicious use of SetWindowsHookEx
PID:852