Overview
overview
4Static
static
3peoplescar...ect.js
windows7-x64
1peoplescar...ect.js
windows10-2004-x64
1peoplescar...ion.js
windows7-x64
1peoplescar...ion.js
windows10-2004-x64
1peoplescar...43.pdf
windows7-x64
1peoplescar...43.pdf
windows10-2004-x64
1peoplescar...05.pdf
windows7-x64
1peoplescar...05.pdf
windows10-2004-x64
1peoplescar...t.docx
windows7-x64
4peoplescar...t.docx
windows10-2004-x64
1peoplescar...ts.pdf
windows7-x64
1peoplescar...ts.pdf
windows10-2004-x64
1peoplescar...re.pdf
windows7-x64
1peoplescar...re.pdf
windows10-2004-x64
1peoplescar...ty.pdf
windows7-x64
1peoplescar...ty.pdf
windows10-2004-x64
1peoplescar...N.docx
windows7-x64
4peoplescar...N.docx
windows10-2004-x64
1peoplescar...8d.pdf
windows7-x64
1peoplescar...8d.pdf
windows10-2004-x64
1peoplescar...a4.pdf
windows7-x64
1peoplescar...a4.pdf
windows10-2004-x64
1peoplescar...t.docx
windows7-x64
4peoplescar...t.docx
windows10-2004-x64
1peoplescar...).xlsx
windows7-x64
1peoplescar...).xlsx
windows10-2004-x64
1peoplescar...).xlsx
windows7-x64
1peoplescar...).xlsx
windows10-2004-x64
1peoplescar...).xlsx
windows7-x64
1peoplescar...).xlsx
windows10-2004-x64
1peoplescar...o.html
windows7-x64
1peoplescar...o.html
windows10-2004-x64
1Analysis
-
max time kernel
156s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
07/11/2023, 13:42
Behavioral task
behavioral1
Sample
peoplescare/bootstrap-multiselect.js
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
peoplescare/bootstrap-multiselect.js
Resource
win10v2004-20231025-en
Behavioral task
behavioral3
Sample
peoplescare/checkSession.js
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
peoplescare/checkSession.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
peoplescare/file/resume/37affc52f8542e0eab1b6695d0940e43.pdf
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
peoplescare/file/resume/37affc52f8542e0eab1b6695d0940e43.pdf
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
peoplescare/file/resume/8f4c11c27dbcf6e4792962894fd5ee05.pdf
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
peoplescare/file/resume/8f4c11c27dbcf6e4792962894fd5ee05.pdf
Resource
win10v2004-20231020-en
Behavioral task
behavioral9
Sample
peoplescare/file/resume/Gantt.docx
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
peoplescare/file/resume/Gantt.docx
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
peoplescare/file/resume/HelpfulContacts.pdf
Resource
win7-20231020-en
Behavioral task
behavioral12
Sample
peoplescare/file/resume/HelpfulContacts.pdf
Resource
win10v2004-20231020-en
Behavioral task
behavioral13
Sample
peoplescare/file/resume/Medigap_Compare.pdf
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
peoplescare/file/resume/Medigap_Compare.pdf
Resource
win10v2004-20231020-en
Behavioral task
behavioral15
Sample
peoplescare/file/resume/PlanInfoCounty.pdf
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
peoplescare/file/resume/PlanInfoCounty.pdf
Resource
win10v2004-20231025-en
Behavioral task
behavioral17
Sample
peoplescare/file/resume/TRAINING_PLAN.docx
Resource
win7-20231025-en
Behavioral task
behavioral18
Sample
peoplescare/file/resume/TRAINING_PLAN.docx
Resource
win10v2004-20231020-en
Behavioral task
behavioral19
Sample
peoplescare/file/resume/a07f355e0977fd91c16394c4a042f08d.pdf
Resource
win7-20231023-en
Behavioral task
behavioral20
Sample
peoplescare/file/resume/a07f355e0977fd91c16394c4a042f08d.pdf
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
peoplescare/file/resume/b97718ee17695c777fe8d7d7b1d02ea4.pdf
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
peoplescare/file/resume/b97718ee17695c777fe8d7d7b1d02ea4.pdf
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
peoplescare/file/resume/contract.docx
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
peoplescare/file/resume/contract.docx
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
peoplescare/file/upload/5cb2ca9daabed_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win7-20231025-en
Behavioral task
behavioral26
Sample
peoplescare/file/upload/5cb2ca9daabed_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win10v2004-20231020-en
Behavioral task
behavioral27
Sample
peoplescare/file/upload/5cb2caae8c07d_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win7-20231020-en
Behavioral task
behavioral28
Sample
peoplescare/file/upload/5cb2caae8c07d_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
peoplescare/file/upload/multi_upload/5cb2c98ba4ba7_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win7-20231023-en
Behavioral task
behavioral30
Sample
peoplescare/file/upload/multi_upload/5cb2c98ba4ba7_0.IICA Intakes Edit 4-9-19 Checklist().xlsx
Resource
win10v2004-20231025-en
Behavioral task
behavioral31
Sample
peoplescare/fonts/raleway-regular-demo.html
Resource
win7-20231023-en
Behavioral task
behavioral32
Sample
peoplescare/fonts/raleway-regular-demo.html
Resource
win10v2004-20231023-en
General
-
Target
peoplescare/file/resume/8f4c11c27dbcf6e4792962894fd5ee05.pdf
-
Size
39KB
-
MD5
91a6e4f608aa8e2c970553d377dffcc4
-
SHA1
5662e2956713c5283a3c8a664f58b6de28bb0695
-
SHA256
729b6bcdae14e778ae8835b49780a8d5ed797213e02eececa7644bd22e53100a
-
SHA512
5714daa8793eebdeb77cf51af4b6b42f37e1a61d941d8a828a2b850437d0ea42f065ab7e15450221fe2991c0d3b94165a908fee29a01bf05d758efae4bdc8e93
-
SSDEEP
768:CHm4V2TIOI7BxnxRzVrxNAIdxlm/lC7Rlem15qDmk2gnxbcLrYHH2juXVloHXuR7:iVu1IVxnxlNFx10ifgnx6Yn4uFgA
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1916 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1916 AcroRd32.exe 1916 AcroRd32.exe 1916 AcroRd32.exe 1916 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\peoplescare\file\resume\8f4c11c27dbcf6e4792962894fd5ee05.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1916
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c5c8012c5d18d934515da5defca11307
SHA1e36f872bbbfd8b50db5f3e88797ba0e994300e9a
SHA256514c1b07d1dd1fd4cd3e105259375906d854bd73e1404b13b1083fe201b6bea3
SHA5123858ca53f76dd8de20c8af9807d8a420846175d1657fcd3b0236faea78ef728d835e027b46073b2627cba8f6dfa0432c431b024006aa7d786d8e8e42c632d233