Overview
overview
7Static
static
5Lizenzvere...en.pdf
windows7-x64
1Lizenzvere...en.pdf
windows10-2004-x64
1VisualLoca...nt.pdf
windows7-x64
1VisualLoca...nt.pdf
windows10-2004-x64
1VisualLoca...ag.ps1
windows7-x64
1VisualLoca...ag.ps1
windows10-2004-x64
1mdac2.6.exe
windows7-x64
7mdac2.6.exe
windows10-2004-x64
7msxml3usa.msi
windows7-x64
6msxml3usa.msi
windows10-2004-x64
6setup.exe
windows7-x64
7setup.exe
windows10-2004-x64
7Analysis
-
max time kernel
121s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29-12-2023 18:05
Behavioral task
behavioral1
Sample
Lizenzvereinbarungen.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Lizenzvereinbarungen.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
VisualLocalize_Software_Maintenance_and Support_Agreement.pdf
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
VisualLocalize_Software_Maintenance_and Support_Agreement.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
VisualLocalize_Softwarepflegevertrag.ps1
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
VisualLocalize_Softwarepflegevertrag.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
mdac2.6.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
mdac2.6.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
msxml3usa.msi
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
msxml3usa.msi
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
setup.exe
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
setup.exe
Resource
win10v2004-20231215-en
General
-
Target
Lizenzvereinbarungen.pdf
-
Size
147KB
-
MD5
d0c927725da4846d7a1c6159f79079d0
-
SHA1
d748b66ed8bc3fa7cf1f904a86dce1be72668b84
-
SHA256
fc5845ac5267b5239084a66876b3285088c26301884bfb6f3c77040b0e947fab
-
SHA512
65eaba222617bb1e2a63b819665717fbac05873e32b1145645781e53ea81e2de7923c6eb9a96d1e1304b3a1a06ffeac0de19cb7dc4bf9add574b8dd6ceb0132e
-
SSDEEP
3072:8WUAxln3rYBDCK8+RrUlaR2ud1ML1mDVzbbHUALDkZo37:8W7xlnEpCrQUlavd1MLEDVznUALT
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2648 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2648 AcroRd32.exe 2648 AcroRd32.exe 2648 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53c986dff0cd5611ee3a13ef652c39010
SHA1e66e4b2c14742547d28adafbb0ee2204ff4b9cb7
SHA25663a9bc8451fb38138d11e0041b848e8caad226898111be85ec4b796df4f08fc3
SHA5126741b45f0415ca893973c7e6360cfd50bd0c506e90d2e763857b30dc550b9eea2d9a8776d178c859d913b07c974c325f0c83fa123e8714fd9cec93c19d05174e