Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26-12-2023 02:43
Behavioral task
behavioral1
Sample
HDDScan_v31/HDDScan/HDDScan-eng.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
HDDScan_v31/HDDScan/HDDScan-eng.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
HDDScan_v31/HDDScan/HDDScan-rus.pdf
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
HDDScan_v31/HDDScan/HDDScan-rus.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
HDDScan_v31/HDDScan/HDDScan.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
HDDScan_v31/HDDScan/HDDScan.exe
Resource
win10v2004-20231222-en
General
-
Target
HDDScan_v31/HDDScan/HDDScan-eng.pdf
-
Size
792KB
-
MD5
7f710ed5915be22974a51937870fd122
-
SHA1
5a73ef3b9570b9a6ce16137167e53a70b2e95aea
-
SHA256
32a3a76aa17523f3ecd4bd0b354a5d169c313ccc00b1100752c105811b4cb2aa
-
SHA512
7285930ae6523312b19d11880cfd9b5a73a48efd9323d90704311ee17314a06a4a38696ed0b23cbed08bbdd07774028301d8d05afec08fcb173300e1835908e5
-
SSDEEP
12288:JK0X9ZkWqlLaqyj5OTSZIowL9ISQRvBezhSGeLwsDMQQZ/tiGLO:00XwiwgRv0SGeLUQQZ/tiD
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1940 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1940 AcroRd32.exe 1940 AcroRd32.exe 1940 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59b63c1d8b3d9bc2a0578ee3f3d8ca013
SHA1d522ab4f3c3b0622a7a41f8abad780e8ddff716d
SHA2565983ce001b9c04660d4b3f415e89765c7f8445aeff6e555e5591e11a5725d627
SHA51221093715e63c8b0c94b2f6ba7edeaa48ccaebd3e751d17b5925fbc892be6e000a997a1a290a89337bae79df2a1601d768d6fff97cfda02e72f614314c54ae766