Overview
overview
1Static
static
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...02.pdf
windows7-x64
1com/sk/lq/...02.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...02.pdf
windows7-x64
1com/sk/lq/...02.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...02.pdf
windows7-x64
1com/sk/lq/...02.pdf
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
10/01/2024, 09:51
Static task
static1
Behavioral task
behavioral1
Sample
com/sk/lq/general/web/pdfTemplate/Za1100.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
com/sk/lq/general/web/pdfTemplate/Za1100.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
com/sk/lq/general/web/pdfTemplate/Za1200.pdf
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
com/sk/lq/general/web/pdfTemplate/Za1200.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
com/sk/lq/general/web/pdfTemplate/Za1300.pdf
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
com/sk/lq/general/web/pdfTemplate/Za1300.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
com/sk/lq/general/web/pdfTemplate/Za1400.pdf
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
com/sk/lq/general/web/pdfTemplate/Za1400.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
com/sk/lq/general/web/pdfTemplate/Za1500.pdf
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
com/sk/lq/general/web/pdfTemplate/Za1500.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
com/sk/lq/general/web/pdfTemplate/Za2100.pdf
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
com/sk/lq/general/web/pdfTemplate/Za2100.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
com/sk/lq/general/web/pdfTemplate/Za2102.pdf
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
com/sk/lq/general/web/pdfTemplate/Za2102.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
com/sk/lq/general/web/pdfTemplate/Za2200.pdf
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
com/sk/lq/general/web/pdfTemplate/Za2200.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
com/sk/lq/general/web/pdfTemplate/Za2300.pdf
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
com/sk/lq/general/web/pdfTemplate/Za2300.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral19
Sample
com/sk/lq/general/web/pdfTemplate/Za3100.pdf
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
com/sk/lq/general/web/pdfTemplate/Za3100.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
com/sk/lq/general/web/pdfTemplate/Za3200.pdf
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
com/sk/lq/general/web/pdfTemplate/Za3200.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
com/sk/lq/general/web/pdfTemplate/Za3300.pdf
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
com/sk/lq/general/web/pdfTemplate/Za3300.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
com/sk/lq/general/web/pdfTemplate/Za3302.pdf
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
com/sk/lq/general/web/pdfTemplate/Za3302.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
com/sk/lq/general/web/pdfTemplate/Za3400.pdf
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
com/sk/lq/general/web/pdfTemplate/Za3400.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
com/sk/lq/general/web/pdfTemplate/Za3500.pdf
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
com/sk/lq/general/web/pdfTemplate/Za3500.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral31
Sample
com/sk/lq/general/web/pdfTemplate/Za3502.pdf
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
com/sk/lq/general/web/pdfTemplate/Za3502.pdf
Resource
win10v2004-20231222-en
General
-
Target
com/sk/lq/general/web/pdfTemplate/Za2100.pdf
-
Size
25KB
-
MD5
646e0f75c10d8ce93059da3df13a2903
-
SHA1
540c5f6c4230ba684d3cf806f1e9b8a58015dfea
-
SHA256
7a308db491e1a3845bff8a846ed3f06fe7d8c902d67c4e27ce4b9902e08301bc
-
SHA512
cc70ed82ffba674f834bab238e73fb139866af54b66e27a9d589c79b5e464be63edada030be4c01a82ee35e33abc0d3141111f68f6176cebfdbd361ec44ef4f8
-
SSDEEP
768:F6Ywov/U+PIAWhq9assZBJQQz51O/oXWJCjl/:ko3RIFooB+c51OgXBjl/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1948 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1948 AcroRd32.exe 1948 AcroRd32.exe 1948 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\com\sk\lq\general\web\pdfTemplate\Za2100.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1948
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5244f6b88a7e004dc56170cf9e970f36a
SHA168f3c157e09a514a6fba509a089bc3102f72743f
SHA2560bf6fcffa4417a9c26cbd92579d26222cd71517aa9b3d353df3a4d18cdcbe8fc
SHA512f0214fc09d3861a49d59e41fedd598dd8e5a99b8702e2c237975087328c81e259581986bfe339846a02dd7206bde3d9d7be3fab594e8cab22fb3223b40045b8d