Overview
overview
3Static
static
3Monalisa/Main.vbs
windows7-x64
1Monalisa/Main.vbs
windows10-2004-x64
1F13Oligomo...us.pdf
windows7-x64
1F13Oligomo...us.pdf
windows10-2004-x64
1F13ScanApi...pi.pdf
windows7-x64
1F13ScanApi...pi.pdf
windows10-2004-x64
1F13W32Viru...us.pdf
windows7-x64
1F13W32Viru...us.pdf
windows10-2004-x64
1F-130x1/lc...vx.htm
windows7-x64
1F-130x1/lc...vx.htm
windows10-2004-x64
1F-130x1/lc...sm.htm
windows7-x64
1F-130x1/lc...sm.htm
windows10-2004-x64
1F-130x1/lc...sm.htm
windows7-x64
1F-130x1/lc...sm.htm
windows10-2004-x64
1F-130x1/lc...sm.htm
windows7-x64
1F-130x1/lc...sm.htm
windows10-2004-x64
1SkypeWormG...or.exe
windows7-x64
1SkypeWormG...or.exe
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 21:41
Behavioral task
behavioral1
Sample
Monalisa/Main.vbs
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Monalisa/Main.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
F13OligomorphicVirus/F13OligomorphicVirus.pdf
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
F13OligomorphicVirus/F13OligomorphicVirus.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
F13ScanApi/F13ScanApi.pdf
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
F13ScanApi/F13ScanApi.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
F13W32Virus/F13W32Virus.pdf
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
F13W32Virus/F13W32Virus.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
F-130x1/lclee_vx/Lychan_lclee_vx.htm
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
F-130x1/lclee_vx/Lychan_lclee_vx.htm
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
F-130x1/lclee_vx/RetrieveKernelAddress_asm.htm
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
F-130x1/lclee_vx/RetrieveKernelAddress_asm.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
F-130x1/lclee_vx/ScanApiChecksum_asm.htm
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
F-130x1/lclee_vx/ScanApiChecksum_asm.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
F-130x1/lclee_vx/Win32_Ceel_a_asm.htm
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
F-130x1/lclee_vx/Win32_Ceel_a_asm.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
SkypeWormGenerator.exe
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
SkypeWormGenerator.exe
Resource
win10v2004-20231215-en
General
-
Target
F13W32Virus/F13W32Virus.pdf
-
Size
90KB
-
MD5
abbe32401a866e6382e45b1debb6c69b
-
SHA1
2c5be0c08fb6392a3d69b5959b8f0ad07c4a085f
-
SHA256
6b916972d0d07ae319ef4ba1fb3dbf8c7dedb4ea667ac0aabf8d1472ce04f274
-
SHA512
4f092acb7b3476027443ec4ba6e3c154647974cd2f1edfa96f24b95db13ec7fab650bf46a8d4d7ee0f57ffca6aa4593df78f9a6ed531f40dc795abf450fc6742
-
SSDEEP
1536:u3rozYqnQkqXrj4wO5Hl6oli5H7CETcKiyrLYptYWeX448VMRFZmnjp7+AgC:6XqnuXcoEkI4cnjppp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e8af00bb2780e90795077fcfbb11ebe5
SHA1aaf5c663412a56db8c27ef311d8f03b7a2fe99a3
SHA2563ea478ab0ab274d0c1ce38b163a2c9d9b061cb373f022650e018b5cc6246c267
SHA51243efbf32f36e9375289c61d905d0f1d2d293d9cfb4bd9f064734574d355c992353679136361fdfb662194912efa6d11cbc34ee19792731968d6da6b39056fef2