Overview
overview
4Static
static
4PingCastle....1.zip
windows7-x64
1PingCastle....1.zip
windows10-2004-x64
1Active Dir....4.pdf
windows7-x64
1Active Dir....4.pdf
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1PingCastle v3.0.0.pdf
windows7-x64
1PingCastle v3.0.0.pdf
windows10-2004-x64
1PingCastle.exe
windows7-x64
1PingCastle.exe
windows10-2004-x64
1PingCastle.exe.xml
windows7-x64
1PingCastle.exe.xml
windows10-2004-x64
1PingCastle.pdb
windows7-x64
3PingCastle.pdb
windows10-2004-x64
3PingCastle...er.exe
windows7-x64
1PingCastle...er.exe
windows10-2004-x64
1PingCastle...xe.xml
windows7-x64
1PingCastle...xe.xml
windows10-2004-x64
1PingCastle...er.pdb
windows7-x64
3PingCastle...er.pdb
windows10-2004-x64
3changelog.txt
windows7-x64
1changelog.txt
windows10-2004-x64
1license.rtf
windows7-x64
4license.rtf
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
24-01-2024 14:07
Behavioral task
behavioral1
Sample
PingCastle_3.1.0.1.zip
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
PingCastle_3.1.0.1.zip
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
Active Directory Security Self Assessment v1.4.pdf
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Active Directory Security Self Assessment v1.4.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
Newtonsoft.Json.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
PingCastle v3.0.0.pdf
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
PingCastle v3.0.0.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
PingCastle.exe
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
PingCastle.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
PingCastle.exe.xml
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
PingCastle.exe.xml
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
PingCastle.pdb
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
PingCastle.pdb
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
PingCastleAutoUpdater.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
PingCastleAutoUpdater.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
PingCastleAutoUpdater.exe.xml
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
PingCastleAutoUpdater.exe.xml
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
PingCastleAutoUpdater.pdb
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
PingCastleAutoUpdater.pdb
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
changelog.txt
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
changelog.txt
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
license.rtf
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
license.rtf
Resource
win10v2004-20231222-en
General
-
Target
PingCastle v3.0.0.pdf
-
Size
1.6MB
-
MD5
c8f501513b29fb8194a6e02b8f16042f
-
SHA1
3f5a9b1c3ac898b9534fbfc16187723a22fd226d
-
SHA256
687592ff1ab4af1d2c4d8d249a14164cd31e79e1d7bc35c213a256904f3bd565
-
SHA512
b292310bd16a4f2813429d963f1caf6794433c961eb6fc5e521ffbe17783779315bd0ddf1ae5aca8cc1506996bfe107c43e6675a8a398a10f3e1a66ef6efa295
-
SSDEEP
24576:dpvvnQ8IbTw2YIG0+cRhKjW3WuG3gQuWlK9hlT69uhrWuQe+FAjjKva:faTw5IimhKSGuG3gQuWE68hiueF3a
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1092 AcroRd32.exe 1092 AcroRd32.exe 1092 AcroRd32.exe