Overview
overview
1Static
static
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...02.pdf
windows7-x64
1com/sk/lq/...02.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...02.pdf
windows7-x64
1com/sk/lq/...02.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...00.pdf
windows7-x64
1com/sk/lq/...00.pdf
windows10-2004-x64
1com/sk/lq/...02.pdf
windows7-x64
1com/sk/lq/...02.pdf
windows10-2004-x64
1Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
10/01/2024, 09:51
Static task
static1
Behavioral task
behavioral1
Sample
com/sk/lq/general/web/pdfTemplate/Za1100.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
com/sk/lq/general/web/pdfTemplate/Za1100.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
com/sk/lq/general/web/pdfTemplate/Za1200.pdf
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
com/sk/lq/general/web/pdfTemplate/Za1200.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
com/sk/lq/general/web/pdfTemplate/Za1300.pdf
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
com/sk/lq/general/web/pdfTemplate/Za1300.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
com/sk/lq/general/web/pdfTemplate/Za1400.pdf
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
com/sk/lq/general/web/pdfTemplate/Za1400.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
com/sk/lq/general/web/pdfTemplate/Za1500.pdf
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
com/sk/lq/general/web/pdfTemplate/Za1500.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
com/sk/lq/general/web/pdfTemplate/Za2100.pdf
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
com/sk/lq/general/web/pdfTemplate/Za2100.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
com/sk/lq/general/web/pdfTemplate/Za2102.pdf
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
com/sk/lq/general/web/pdfTemplate/Za2102.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
com/sk/lq/general/web/pdfTemplate/Za2200.pdf
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
com/sk/lq/general/web/pdfTemplate/Za2200.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
com/sk/lq/general/web/pdfTemplate/Za2300.pdf
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
com/sk/lq/general/web/pdfTemplate/Za2300.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral19
Sample
com/sk/lq/general/web/pdfTemplate/Za3100.pdf
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
com/sk/lq/general/web/pdfTemplate/Za3100.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
com/sk/lq/general/web/pdfTemplate/Za3200.pdf
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
com/sk/lq/general/web/pdfTemplate/Za3200.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
com/sk/lq/general/web/pdfTemplate/Za3300.pdf
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
com/sk/lq/general/web/pdfTemplate/Za3300.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
com/sk/lq/general/web/pdfTemplate/Za3302.pdf
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
com/sk/lq/general/web/pdfTemplate/Za3302.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
com/sk/lq/general/web/pdfTemplate/Za3400.pdf
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
com/sk/lq/general/web/pdfTemplate/Za3400.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
com/sk/lq/general/web/pdfTemplate/Za3500.pdf
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
com/sk/lq/general/web/pdfTemplate/Za3500.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral31
Sample
com/sk/lq/general/web/pdfTemplate/Za3502.pdf
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
com/sk/lq/general/web/pdfTemplate/Za3502.pdf
Resource
win10v2004-20231222-en
General
-
Target
com/sk/lq/general/web/pdfTemplate/Za2200.pdf
-
Size
25KB
-
MD5
29791783eece840f11971e345a2ef58b
-
SHA1
5a4d5e1116268b38ad4a652814bdcf8e7cad88ed
-
SHA256
ed2640b7cf7f481d74b539d5c4cec1663d8453556a96e72143c96e08808a674a
-
SHA512
b1e9af6a5928b735e6440e50794f1c2ae93b09dc2ec808cf6927e19814c51428da12d8fb1df93ab3bc6889844e8399847dddc98af63063496fb34336db2319ee
-
SSDEEP
384:icEgYUv1tfPFA8kmQvA3zfyhC0YTK6t5LmCS6PoowpO/oXWOs/4NVeGlbJ:ldYO1tfPIAWMG6ewoo9/oXWJCjlJ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2124 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2124 AcroRd32.exe 2124 AcroRd32.exe 2124 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\com\sk\lq\general\web\pdfTemplate\Za2200.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2124
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d5980ccdc019fd2c183f0f630a15b9f9
SHA12f454a51340e642b282a59f65ea80c6bc48e3504
SHA256a1740087215d85870fc807bc05b6e5bd76e5d31e5358ff8669a7c305cdb22a4f
SHA512bd9048b05de44d086e26cb1cd12b8b4ce406a41264056150f4a8470040b1ecbef6a43b1754f96da68eb6442ea252a1819b1530525b40ff5dc004d25e85163d5b