Overview
overview
8Static
static
8How-To-Ins...in.pdf
windows7-x64
1How-To-Ins...in.pdf
windows10-1703-x64
1How-To-Ins...in.pdf
windows10-2004-x64
1TreePlan-E...11.xls
windows7-x64
1TreePlan-E...11.xls
windows10-1703-x64
1TreePlan-E...11.xls
windows10-2004-x64
1TreePlan-E...10.xls
windows7-x64
1TreePlan-E...10.xls
windows10-1703-x64
1TreePlan-E...10.xls
windows10-2004-x64
1TreePlan-G...79.pdf
windows7-x64
1TreePlan-G...79.pdf
windows10-1703-x64
1TreePlan-G...79.pdf
windows10-2004-x64
1TreePlan-S...in.xls
windows7-x64
1TreePlan-S...in.xls
windows10-1703-x64
1TreePlan-S...in.xls
windows10-2004-x64
1Analysis
-
max time kernel
150s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
25-09-2023 20:37
Behavioral task
behavioral1
Sample
How-To-Install-Addin.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
How-To-Install-Addin.pdf
Resource
win10-20230915-en
Behavioral task
behavioral3
Sample
How-To-Install-Addin.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral4
Sample
TreePlan-Example-179-Mac-2011.xls
Resource
win7-20230831-en
Behavioral task
behavioral5
Sample
TreePlan-Example-179-Mac-2011.xls
Resource
win10-20230915-en
Behavioral task
behavioral6
Sample
TreePlan-Example-179-Mac-2011.xls
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
TreePlan-Example-179-Win-2010.xls
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
TreePlan-Example-179-Win-2010.xls
Resource
win10-20230915-en
Behavioral task
behavioral9
Sample
TreePlan-Example-179-Win-2010.xls
Resource
win10v2004-20230915-en
Behavioral task
behavioral10
Sample
TreePlan-Guide-179.pdf
Resource
win7-20230831-en
Behavioral task
behavioral11
Sample
TreePlan-Guide-179.pdf
Resource
win10-20230915-en
Behavioral task
behavioral12
Sample
TreePlan-Guide-179.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
TreePlan-Student-179-Addin.xls
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
TreePlan-Student-179-Addin.xls
Resource
win10-20230915-en
Behavioral task
behavioral15
Sample
TreePlan-Student-179-Addin.xls
Resource
win10v2004-20230915-en
General
-
Target
TreePlan-Guide-179.pdf
-
Size
211KB
-
MD5
53bbb7d238f7cc3afe14a2f7a11ad4a3
-
SHA1
c585cefde33febe94d9f40fc09b28c654c9916c8
-
SHA256
7e157933a048da66906804c016a44b7225a09d0a866908d55d4fe9811075919e
-
SHA512
0d33f6ca3932c298e4e496a50cd09e5333e02140720682af8a0c2520eb3bccb8705c8a077479eab2f8ca8500d5716bbb88f679d049099d11ea3243802c9cb33e
-
SSDEEP
3072:TkxChG5B4dsFwiLXOaLIA4kj0bh/lJnWi/Dfna9SVrlWsNNU3WtCrn93U/JMmPq:TA5Be4Xbt4CePci/DfSi1HU31rn9WMsq
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2336 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2336 AcroRd32.exe 2336 AcroRd32.exe 2336 AcroRd32.exe 2336 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5fa184d7064bbc24f0b5165c7bc957797
SHA1a83270f23ae3e18b2e674c4863634abe17267016
SHA256877c64c4c5714668e42488caa5eb7a7e3ca8c22e5af7ded6ea359abacc76c3ee
SHA5121324bc28c5a6129ca754d7ae161a7e8b9303b07b76c267d29cf6a42b0f7480ce356044b5a4a1a9a4133a69830d55c9775276471d5ed5155abd05b47bdcefa321