Overview
overview
1Static
static
1c211427eca...52.zip
windows7-x64
1c211427eca...52.zip
windows10-2004-x64
1c211427eca...52.zip
windows7-x64
1c211427eca...52.zip
windows10-2004-x64
1Specificat...t.xlsx
windows7-x64
1Specificat...t.xlsx
windows10-2004-x64
1Specificat...r.xlsx
windows7-x64
1Specificat...r.xlsx
windows10-2004-x64
1Specificat...ls.pdf
windows7-x64
1Specificat...ls.pdf
windows10-2004-x64
1Specificat...on.pdf
windows7-x64
1Specificat...on.pdf
windows10-2004-x64
1Specificat...on.pdf
windows7-x64
1Specificat...on.pdf
windows10-2004-x64
1Specificat...ea.xls
windows7-x64
1Specificat...ea.xls
windows10-2004-x64
1Specificat...t.xlsx
windows7-x64
1Specificat...t.xlsx
windows10-2004-x64
1Specificat...et.pdf
windows7-x64
1Specificat...et.pdf
windows10-2004-x64
1Analysis
-
max time kernel
151s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
16-10-2023 12:36
Static task
static1
Behavioral task
behavioral1
Sample
c211427eca3bab8a583295a14773cf52.zip
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c211427eca3bab8a583295a14773cf52.zip
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
c211427eca3bab8a583295a14773cf52.zip
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
c211427eca3bab8a583295a14773cf52.zip
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
Specifications/AWL - Shirt.xlsx
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
Specifications/AWL - Shirt.xlsx
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
Specifications/AWL - Trouser.xlsx
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
Specifications/AWL - Trouser.xlsx
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
Specifications/Boiler Suit & Coveralls.pdf
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
Specifications/Boiler Suit & Coveralls.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
Specifications/Cement BU - Denim specification.pdf
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
Specifications/Cement BU - Denim specification.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
Specifications/Cement BU - Shirt specification.pdf
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
Specifications/Cement BU - Shirt specification.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
Specifications/Coverall fabric for sea shore work area.xls
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
Specifications/Coverall fabric for sea shore work area.xls
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
Specifications/Shirt, Trouser, Denim and T-Shirt.xlsx
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
Specifications/Shirt, Trouser, Denim and T-Shirt.xlsx
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
Specifications/Winter Jacket.pdf
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
Specifications/Winter Jacket.pdf
Resource
win10v2004-20230915-en
General
-
Target
Specifications/Cement BU - Denim specification.pdf
-
Size
439KB
-
MD5
b34f77aab888f7d210b2aa068f2241bc
-
SHA1
05c86d47f2b15e4406d09372d298413a5820f00e
-
SHA256
40d813bc2512657293bd4bfa73ed726b4a83c9200225d5b77fa41b9e76089593
-
SHA512
b3233a78cffb0a49ad0cf101a7b9c80f5c367e77b4b80226098dea872e74d46f1dec0138da3bcab167bc4c1d3ad43f99b2bd94d090eb94025a6e5e131d15b06f
-
SSDEEP
12288:ngBnBu+8UjdjnKgEj3J1eK8UBSQZcGVzz1zoUy0:CnBdjnKh3J1P8iSQZr5zry0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2028 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2028 AcroRd32.exe 2028 AcroRd32.exe 2028 AcroRd32.exe 2028 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Specifications\Cement BU - Denim specification.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2028
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53a9b3c1eead543c9a4be9628991c6431
SHA14c9d19c27f1c23ed094c19e27285cc5f80ac58de
SHA2560513693bda8b6a4d61b61e01541889e6b04618e62f14a903a66242d866d6a087
SHA5124d05bf0fe24955c8c9de98af572f9b5129a86fc25a910b5ec7a25fe691db7f7c1ca01e0e51ff0d065271db505dc730b57f8aedb3e3bdd19fb7cec911cd4a982b