Overview
overview
4Static
static
3peoplescar...ect.js
windows7-x64
1peoplescar...ect.js
windows10-2004-x64
1peoplescar...ion.js
windows7-x64
1peoplescar...ion.js
windows10-2004-x64
1peoplescar...43.pdf
windows7-x64
1peoplescar...43.pdf
windows10-2004-x64
1peoplescar...05.pdf
windows7-x64
1peoplescar...05.pdf
windows10-2004-x64
1peoplescar...t.docx
windows7-x64
4peoplescar...t.docx
windows10-2004-x64
1peoplescar...ts.pdf
windows7-x64
1peoplescar...ts.pdf
windows10-2004-x64
1peoplescar...re.pdf
windows7-x64
1peoplescar...re.pdf
windows10-2004-x64
1peoplescar...ty.pdf
windows7-x64
1peoplescar...ty.pdf
windows10-2004-x64
1peoplescar...N.docx
windows7-x64
4peoplescar...N.docx
windows10-2004-x64
1peoplescar...8d.pdf
windows7-x64
1peoplescar...8d.pdf
windows10-2004-x64
1peoplescar...a4.pdf
windows7-x64
1peoplescar...a4.pdf
windows10-2004-x64
1peoplescar...t.docx
windows7-x64
4peoplescar...t.docx
windows10-2004-x64
1peoplescar...).xlsx
windows7-x64
1peoplescar...).xlsx
windows10-2004-x64
1peoplescar...).xlsx
windows7-x64
1peoplescar...).xlsx
windows10-2004-x64
1peoplescar...).xlsx
windows7-x64
1peoplescar...).xlsx
windows10-2004-x64
1peoplescar...o.html
windows7-x64
1peoplescar...o.html
windows10-2004-x64
1Analysis
-
max time kernel
181s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
07/11/2023, 13:42
Behavioral task
behavioral1
Sample
peoplescare/bootstrap-multiselect.js
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
peoplescare/bootstrap-multiselect.js
Resource
win10v2004-20231025-en
Behavioral task
behavioral3
Sample
peoplescare/checkSession.js
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
peoplescare/checkSession.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
peoplescare/file/resume/37affc52f8542e0eab1b6695d0940e43.pdf
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
peoplescare/file/resume/37affc52f8542e0eab1b6695d0940e43.pdf
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
peoplescare/file/resume/8f4c11c27dbcf6e4792962894fd5ee05.pdf
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
peoplescare/file/resume/8f4c11c27dbcf6e4792962894fd5ee05.pdf
Resource
win10v2004-20231020-en
Behavioral task
behavioral9
Sample
peoplescare/file/resume/Gantt.docx
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
peoplescare/file/resume/Gantt.docx
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
peoplescare/file/resume/HelpfulContacts.pdf
Resource
win7-20231020-en
Behavioral task
behavioral12
Sample
peoplescare/file/resume/HelpfulContacts.pdf
Resource
win10v2004-20231020-en
Behavioral task
behavioral13
Sample
peoplescare/file/resume/Medigap_Compare.pdf
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
peoplescare/file/resume/Medigap_Compare.pdf
Resource
win10v2004-20231020-en
Behavioral task
behavioral15
Sample
peoplescare/file/resume/PlanInfoCounty.pdf
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
peoplescare/file/resume/PlanInfoCounty.pdf
Resource
win10v2004-20231025-en
Behavioral task
behavioral17
Sample
peoplescare/file/resume/TRAINING_PLAN.docx
Resource
win7-20231025-en
Behavioral task
behavioral18
Sample
peoplescare/file/resume/TRAINING_PLAN.docx
Resource
win10v2004-20231020-en
Behavioral task
behavioral19
Sample
peoplescare/file/resume/a07f355e0977fd91c16394c4a042f08d.pdf
Resource
win7-20231023-en
Behavioral task
behavioral20
Sample
peoplescare/file/resume/a07f355e0977fd91c16394c4a042f08d.pdf
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
peoplescare/file/resume/b97718ee17695c777fe8d7d7b1d02ea4.pdf
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
peoplescare/file/resume/b97718ee17695c777fe8d7d7b1d02ea4.pdf
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
peoplescare/file/resume/contract.docx
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
peoplescare/file/resume/contract.docx
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
peoplescare/file/upload/5cb2ca9daabed_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win7-20231025-en
Behavioral task
behavioral26
Sample
peoplescare/file/upload/5cb2ca9daabed_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win10v2004-20231020-en
Behavioral task
behavioral27
Sample
peoplescare/file/upload/5cb2caae8c07d_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win7-20231020-en
Behavioral task
behavioral28
Sample
peoplescare/file/upload/5cb2caae8c07d_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
peoplescare/file/upload/multi_upload/5cb2c98ba4ba7_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win7-20231023-en
Behavioral task
behavioral30
Sample
peoplescare/file/upload/multi_upload/5cb2c98ba4ba7_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win10v2004-20231025-en
Behavioral task
behavioral31
Sample
peoplescare/fonts/raleway-regular-demo.html
Resource
win7-20231023-en
Behavioral task
behavioral32
Sample
peoplescare/fonts/raleway-regular-demo.html
Resource
win10v2004-20231023-en
General
-
Target
peoplescare/file/resume/a07f355e0977fd91c16394c4a042f08d.pdf
-
Size
31KB
-
MD5
54766394dfafd086f04f906a22c18313
-
SHA1
15f568233f7eb8b7d3495ead9cf614e50ca49f06
-
SHA256
00cc4f19465f82ae1f07017a38534783b6bb83950ec12c4341b0afa7516634de
-
SHA512
6e3b36c01439e6ba9b2de46b1a4fcec1a87a5721dafb6c6e3f62fed12d1f4d7141a301e12adf88e020479c13a5f6e2338d86284ad7fdf08242a5060f8cfebd25
-
SSDEEP
768:P84X1gEdNDHiJ1A/MlaRwbkclu72Nk25/5TFUvuaHvJUdZXywMCBYKL:k4X13pH4uEUObkSNk+6WdxHM8L
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2192 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2192 AcroRd32.exe 2192 AcroRd32.exe 2192 AcroRd32.exe 2192 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\peoplescare\file\resume\a07f355e0977fd91c16394c4a042f08d.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2192
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c12007d247347af9d6cde3f5a9bfe41c
SHA1c34b7d17e1eded1f462572312a73318156271fc1
SHA2565c020a1f41504e73c5883fd10889a82e113874689b73f7fad25135c7a27ec8ed
SHA5125ce5b2103ba4413157040dc3f28af265a8ac6781d69f3a0ba823628122772e5cd1c8dc31d01c719598ae0e60c01094a951f2e7a6b53575507bbf6d567b85b667