Overview

overview

4

Static

static

4

hellokitty...gen.sh

windows7-x64

3

hellokitty...gen.sh

windows10-2004-x64

3

hellokitty...pt.pdf

windows7-x64

1

hellokitty...pt.pdf

windows10-2004-x64

1

hellokitty...ypt.js

windows7-x64

1

hellokitty...ypt.js

windows10-2004-x64

1

Analysis

  • max time kernel
    48s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12-02-2024 17:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    hellokitty/NTRUEncrypt/doc/UserNotes-NTRUEncrypt.pdf

  • Size

    676KB

  • MD5

    a8cc8bfa4812cc91209bcd14d73c8a5c

  • SHA1

    0b92915a5c9e07b0d1d1db85a808065988a44e76

  • SHA256

    79bd948d30ab3acbb7b653da9206b0d1a17694fab177b87d578a201af16aeeea

  • SHA512

    7c9b0923d783f270eb96a79c3345a84a7efc70fe0da4decd306c692c304445e478cac59f4eabb138cb3bb36ecf6bef4233c269ffcae77d0878aa0d61cc648aa2

  • SSDEEP

    12288:iV20k29OZHhlxCMqIc/5kdnUgkTAW1vJDTvTy4jh/phC2bRcaft9nVGQCCdCpade:iV20koOZHcM1NkP1vhDTy4ZDdbRcYqa8

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\hellokitty\NTRUEncrypt\doc\UserNotes-NTRUEncrypt.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    69cf8745f2238bdf9a9eede1406daeb9

    SHA1

    3ac2ac1e863134031bfdeea10b89dd7a78402d03

    SHA256

    ad8bcb2433ff03d1cb1175ef2fea96cb661ca282d0692c86a1c36c32350551b2

    SHA512

    c3915963da692e7d2591a75369e643e58b9804ab7fe92a9f6ad6de9c704b7d642bee0fd11581f32c5aa3aee15d61924d79669a8a8b0f055764a82ed1bdd77c67

    Download Submit