Overview
overview
7Static
static
7TuTutorial - KTNE.rar
windows7-x64
4TuTutorial - KTNE.rar
windows10-2004-x64
7KTNE - Man...ol.pdf
windows7-x64
1KTNE - Man...ol.pdf
windows10-2004-x64
1Tututorial...al.pdf
windows7-x64
1Tututorial...al.pdf
windows10-2004-x64
1Tututorial...NE.exe
windows7-x64
7Tututorial...NE.exe
windows10-2004-x64
7Analysis
- max time kernel
119s - max time network
121s - platform
windows7_x64 - resource
win7-20240215-en - resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system - submitted
23/02/2024, 00:27
Behavioral task
behavioral1
Sample
TuTutorial - KTNE.rar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
TuTutorial - KTNE.rar
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
KTNE - Manual en Español.pdf
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
KTNE - Manual en Español.pdf
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
Tututorial - KTNE/Bomb-Defusal-Manual.pdf
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
Tututorial - KTNE/Bomb-Defusal-Manual.pdf
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
Tututorial - KTNE/KTNE.exe
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
Tututorial - KTNE/KTNE.exe
Resource
win10v2004-20240221-en
General
- Target Tututorial - KTNE/Bomb-Defusal-Manual.pdf
- Size 914KB
- Sample240223-ar1tkahd44
- SHA256 7cc4fc928eea7de026709515e75de898cffa8a9b80de3535c057f217debe19b4
- MD5 4b7d53250322dac81beb0a89407ca458
- SHA1 b982e32cc350a4b3ed061e6558301ad7a811b819
- SHA512 3d4d1772c5001ad3ff6a210d731b0706aa3a620974adec485ea982f22bf361f246a5ac7207eb9f47ed2f04df1f36f22c7832f433d5990cb4b7bc6d1c739abb0a
- SSDEEP 24576:YsCqonPdb1l1u6GrQakOkNrWHOTBBvL/Nf4pNvxeidrSmH2BMpn98OEj32X/utEe:YsCqonPLl11yCNrq0TvL/Nf4pNvxeida
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1664 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1664 AcroRd32.exe 1664 AcroRd32.exe 1664 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 23f7ebc1ed39c8be6dfcf2710033c16ffb7d3691f770680a41e89a406c0b5ac3
- MD5 d08ee5746cb2300698bed88e82120007
- SHA1 26ebf096424c336034288e29351f10f4b0e3411a
- SHA512 3fec22236406cc92e7a3d45755e2fda2ccbb9a11a372d667a27fe2d03032ff3c2233853eb99af12496703fb045434eae2588fb6b382283e5f34baa2827e4a12e
- MD5 SHA1 SHA512