c291a907d068be390d8ddc535912d3589fe6fa561cd65283c585896834a8d715

Submit
Reports

Overview

overview

Static

static

peoplescar...ect.js

windows7-x64

peoplescar...ect.js

windows10-2004-x64

peoplescar...ion.js

windows7-x64

peoplescar...ion.js

windows10-2004-x64

peoplescar...43.pdf

windows7-x64

peoplescar...43.pdf

windows10-2004-x64

peoplescar...05.pdf

windows7-x64

peoplescar...05.pdf

windows10-2004-x64

peoplescar...t.docx

windows7-x64

peoplescar...t.docx

windows10-2004-x64

peoplescar...ts.pdf

windows7-x64

peoplescar...ts.pdf

windows10-2004-x64

peoplescar...re.pdf

windows7-x64

peoplescar...re.pdf

windows10-2004-x64

peoplescar...ty.pdf

windows7-x64

peoplescar...ty.pdf

windows10-2004-x64

peoplescar...N.docx

windows7-x64

peoplescar...N.docx

windows10-2004-x64

peoplescar...8d.pdf

windows7-x64

peoplescar...8d.pdf

windows10-2004-x64

peoplescar...a4.pdf

windows7-x64

peoplescar...a4.pdf

windows10-2004-x64

peoplescar...t.docx

windows7-x64

peoplescar...t.docx

windows10-2004-x64

peoplescar...).xlsx

windows7-x64

peoplescar...).xlsx

windows10-2004-x64

peoplescar...).xlsx

windows7-x64

peoplescar...).xlsx

windows10-2004-x64

peoplescar...).xlsx

windows7-x64

peoplescar...).xlsx

windows10-2004-x64

peoplescar...o.html

windows7-x64

peoplescar...o.html

windows10-2004-x64

Analysis

max time kernel
162s
max time network
24s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
07/11/2023, 13:42

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

1 signatures

Behavioral task

behavioral1

Sample

peoplescare/bootstrap-multiselect.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

peoplescare/bootstrap-multiselect.js

Resource

win10v2004-20231025-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

peoplescare/checkSession.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

peoplescare/checkSession.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

peoplescare/file/resume/37affc52f8542e0eab1b6695d0940e43.pdf

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

peoplescare/file/resume/37affc52f8542e0eab1b6695d0940e43.pdf

Resource

win10v2004-20231023-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

peoplescare/file/resume/8f4c11c27dbcf6e4792962894fd5ee05.pdf

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

peoplescare/file/resume/8f4c11c27dbcf6e4792962894fd5ee05.pdf

Resource

win10v2004-20231020-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral9

Sample

peoplescare/file/resume/Gantt.docx

Resource

win7-20231023-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral10

Sample

peoplescare/file/resume/Gantt.docx

Resource

win10v2004-20231020-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

peoplescare/file/resume/HelpfulContacts.pdf

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

peoplescare/file/resume/HelpfulContacts.pdf

Resource

win10v2004-20231020-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral13

Sample

peoplescare/file/resume/Medigap_Compare.pdf

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

peoplescare/file/resume/Medigap_Compare.pdf

Resource

win10v2004-20231020-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral15

Sample

peoplescare/file/resume/PlanInfoCounty.pdf

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

peoplescare/file/resume/PlanInfoCounty.pdf

Resource

win10v2004-20231025-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral17

Sample

peoplescare/file/resume/TRAINING_PLAN.docx

Resource

win7-20231025-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral18

Sample

peoplescare/file/resume/TRAINING_PLAN.docx

Resource

win10v2004-20231020-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

peoplescare/file/resume/a07f355e0977fd91c16394c4a042f08d.pdf

Resource

win7-20231023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

peoplescare/file/resume/a07f355e0977fd91c16394c4a042f08d.pdf

Resource

win10v2004-20231023-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral21

Sample

peoplescare/file/resume/b97718ee17695c777fe8d7d7b1d02ea4.pdf

Resource

win7-20231020-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

peoplescare/file/resume/b97718ee17695c777fe8d7d7b1d02ea4.pdf

Resource

win10v2004-20231023-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral23

Sample

peoplescare/file/resume/contract.docx

Resource

win7-20231020-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral24

Sample

peoplescare/file/resume/contract.docx

Resource

win10v2004-20231020-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

peoplescare/file/upload/5cb2ca9daabed_0.IICA Intakes Edit 4-9-19 Checklist().xlsx

Resource

win7-20231025-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

peoplescare/file/upload/5cb2ca9daabed_0.IICA Intakes Edit 4-9-19 Checklist().xlsx

Resource

win10v2004-20231020-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

peoplescare/file/upload/5cb2caae8c07d_0.IICA Intakes Edit 4-9-19 Checklist().xlsx

Resource

win7-20231020-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral28

Sample

peoplescare/file/upload/5cb2caae8c07d_0.IICA Intakes Edit 4-9-19 Checklist().xlsx

Resource

win10v2004-20231023-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral29

Sample

peoplescare/file/upload/multi_upload/5cb2c98ba4ba7_0.IICA Intakes Edit 4-9-19 Checklist().xlsx

Resource

win7-20231023-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral30

Sample

peoplescare/file/upload/multi_upload/5cb2c98ba4ba7_0.IICA Intakes Edit 4-9-19 Checklist().xlsx

Resource

win10v2004-20231025-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral31

Sample

peoplescare/fonts/raleway-regular-demo.html

Resource

win7-20231023-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

peoplescare/fonts/raleway-regular-demo.html

Resource

win10v2004-20231023-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

peoplescare/file/resume/PlanInfoCounty.pdf
Size

27KB
MD5

4777ebcbdc0df5b45860495e400794a1
SHA1

43ce0375d89ea3bcdc40a14b6a1254512896c592
SHA256

9f6cf43da5bd0fbf064d92fdd9da5cc64f2a999c02db4a84d081c96f49679f68
SHA512

9d705a028f5b3e2fc9c79285480010ac66ec14ce6a5cab982a6f23374f7839db4ee5156638c6b4cab171606f02c26097da74580c4a88841f9723cf71e9e36310
SSDEEP

768:tEGoUiMYGpREN34LuY7SB+b0FGZY5TtXR9yD9JUdZXywMbsYd7h93fG:tEdUisRE077SB+4FGZA6WdxHMN7h93fG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2536	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2536	AcroRd32.exe
2536	AcroRd32.exe
2536	AcroRd32.exe
2536	AcroRd32.exe

Processes

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\peoplescare\file\resume\PlanInfoCounty.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
92da0710b6b46845da3d8a487d3ea0d5

SHA1
bd345552abe1329a7da3c731808657b78ca83f80

SHA256
6d8035f83fca62dd34779a62fddf679f352155359cdfe6d120a0bde3468777a2

SHA512
0f1e59037958951bebc319004d48a4c27bbd18de68cf75cab8c81e072b06d0730bce0cd1e54ded7a4d127d524dfb65b0a5044c929631c76382bf6b5d17aa72cb

Download Submit