Overview
overview
4Static
static
3peoplescar...ect.js
windows7-x64
1peoplescar...ect.js
windows10-2004-x64
1peoplescar...ion.js
windows7-x64
1peoplescar...ion.js
windows10-2004-x64
1peoplescar...43.pdf
windows7-x64
1peoplescar...43.pdf
windows10-2004-x64
1peoplescar...05.pdf
windows7-x64
1peoplescar...05.pdf
windows10-2004-x64
1peoplescar...t.docx
windows7-x64
4peoplescar...t.docx
windows10-2004-x64
1peoplescar...ts.pdf
windows7-x64
1peoplescar...ts.pdf
windows10-2004-x64
1peoplescar...re.pdf
windows7-x64
1peoplescar...re.pdf
windows10-2004-x64
1peoplescar...ty.pdf
windows7-x64
1peoplescar...ty.pdf
windows10-2004-x64
1peoplescar...N.docx
windows7-x64
4peoplescar...N.docx
windows10-2004-x64
1peoplescar...8d.pdf
windows7-x64
1peoplescar...8d.pdf
windows10-2004-x64
1peoplescar...a4.pdf
windows7-x64
1peoplescar...a4.pdf
windows10-2004-x64
1peoplescar...t.docx
windows7-x64
4peoplescar...t.docx
windows10-2004-x64
1peoplescar...).xlsx
windows7-x64
1peoplescar...).xlsx
windows10-2004-x64
1peoplescar...).xlsx
windows7-x64
1peoplescar...).xlsx
windows10-2004-x64
1peoplescar...).xlsx
windows7-x64
1peoplescar...).xlsx
windows10-2004-x64
1peoplescar...o.html
windows7-x64
1peoplescar...o.html
windows10-2004-x64
1Analysis
-
max time kernel
160s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
07/11/2023, 13:42
Behavioral task
behavioral1
Sample
peoplescare/bootstrap-multiselect.js
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
peoplescare/bootstrap-multiselect.js
Resource
win10v2004-20231025-en
Behavioral task
behavioral3
Sample
peoplescare/checkSession.js
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
peoplescare/checkSession.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
peoplescare/file/resume/37affc52f8542e0eab1b6695d0940e43.pdf
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
peoplescare/file/resume/37affc52f8542e0eab1b6695d0940e43.pdf
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
peoplescare/file/resume/8f4c11c27dbcf6e4792962894fd5ee05.pdf
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
peoplescare/file/resume/8f4c11c27dbcf6e4792962894fd5ee05.pdf
Resource
win10v2004-20231020-en
Behavioral task
behavioral9
Sample
peoplescare/file/resume/Gantt.docx
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
peoplescare/file/resume/Gantt.docx
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
peoplescare/file/resume/HelpfulContacts.pdf
Resource
win7-20231020-en
Behavioral task
behavioral12
Sample
peoplescare/file/resume/HelpfulContacts.pdf
Resource
win10v2004-20231020-en
Behavioral task
behavioral13
Sample
peoplescare/file/resume/Medigap_Compare.pdf
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
peoplescare/file/resume/Medigap_Compare.pdf
Resource
win10v2004-20231020-en
Behavioral task
behavioral15
Sample
peoplescare/file/resume/PlanInfoCounty.pdf
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
peoplescare/file/resume/PlanInfoCounty.pdf
Resource
win10v2004-20231025-en
Behavioral task
behavioral17
Sample
peoplescare/file/resume/TRAINING_PLAN.docx
Resource
win7-20231025-en
Behavioral task
behavioral18
Sample
peoplescare/file/resume/TRAINING_PLAN.docx
Resource
win10v2004-20231020-en
Behavioral task
behavioral19
Sample
peoplescare/file/resume/a07f355e0977fd91c16394c4a042f08d.pdf
Resource
win7-20231023-en
Behavioral task
behavioral20
Sample
peoplescare/file/resume/a07f355e0977fd91c16394c4a042f08d.pdf
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
peoplescare/file/resume/b97718ee17695c777fe8d7d7b1d02ea4.pdf
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
peoplescare/file/resume/b97718ee17695c777fe8d7d7b1d02ea4.pdf
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
peoplescare/file/resume/contract.docx
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
peoplescare/file/resume/contract.docx
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
peoplescare/file/upload/5cb2ca9daabed_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win7-20231025-en
Behavioral task
behavioral26
Sample
peoplescare/file/upload/5cb2ca9daabed_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win10v2004-20231020-en
Behavioral task
behavioral27
Sample
peoplescare/file/upload/5cb2caae8c07d_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win7-20231020-en
Behavioral task
behavioral28
Sample
peoplescare/file/upload/5cb2caae8c07d_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
peoplescare/file/upload/multi_upload/5cb2c98ba4ba7_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win7-20231023-en
Behavioral task
behavioral30
Sample
peoplescare/file/upload/multi_upload/5cb2c98ba4ba7_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win10v2004-20231025-en
Behavioral task
behavioral31
Sample
peoplescare/fonts/raleway-regular-demo.html
Resource
win7-20231023-en
Behavioral task
behavioral32
Sample
peoplescare/fonts/raleway-regular-demo.html
Resource
win10v2004-20231023-en
General
-
Target
peoplescare/file/resume/37affc52f8542e0eab1b6695d0940e43.pdf
-
Size
39KB
-
MD5
91a6e4f608aa8e2c970553d377dffcc4
-
SHA1
5662e2956713c5283a3c8a664f58b6de28bb0695
-
SHA256
729b6bcdae14e778ae8835b49780a8d5ed797213e02eececa7644bd22e53100a
-
SHA512
5714daa8793eebdeb77cf51af4b6b42f37e1a61d941d8a828a2b850437d0ea42f065ab7e15450221fe2991c0d3b94165a908fee29a01bf05d758efae4bdc8e93
-
SSDEEP
768:CHm4V2TIOI7BxnxRzVrxNAIdxlm/lC7Rlem15qDmk2gnxbcLrYHH2juXVloHXuR7:iVu1IVxnxlNFx10ifgnx6Yn4uFgA
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2272 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2272 AcroRd32.exe 2272 AcroRd32.exe 2272 AcroRd32.exe 2272 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\peoplescare\file\resume\37affc52f8542e0eab1b6695d0940e43.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2272
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ee490e6b73fb642fa63f1fefd50af2eb
SHA13d5257a3e1cc0053fc674a063a4377a05d890c82
SHA25690f2f2bb23c43e2181de4f98d5ddb9dcdcf8220cb80dac743c2b1387be169eba
SHA512c680f42fb1448b5d3eed7c1604806584d98296d32faf4250670b770a81eaab0d613228936ec9c82cd40788face89d706b424b24648522d5f6e726c1043642511