Overview

overview

6

Static

static

6

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Cash.app/Cash

macos-10.15-amd64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Payload/Ca...ts.pdf

windows10-2004-x64

1

Payload/Ca...ts.pdf

windows7-x64

1

Analysis

  • max time kernel
    99s
  • max time network
    30s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-03-2024 12:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Payload/Cash.app/CardStudioResources.bundle/Assets.pdf

  • Size

    136KB

  • MD5

    73659a95b997d486f0f7a97ff564382f

  • SHA1

    7dfc49050d8dad483b913799ffd9454aa377270b

  • SHA256

    318b59c0a9655db2edcabe9e3d22901fb20514caf56ccaa40ef690d7226ac133

  • SHA512

    4ac022aab36880fd660044014dc22210239c3ef7d4fdb8a38e5f39f9cea8d11a10bc0d81b43cd2d79b3065eb3f003bd76f1d5de4aaa1920f9678435d17034a44

  • SSDEEP

    1536:ekwhRcSQbhDDx4P7XqMGay1is9aKGPLdKG6qeS7N2QW00:eONtoqwlPLcikQ0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Payload\Cash.app\CardStudioResources.bundle\Assets.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a739a57b83b004a82bda4a588142b06b

    SHA1

    749e004337f26f38a18cbdadbe8ec93bb02fcbf2

    SHA256

    7f923234945d05d6c62b5c3eb365108372ddbd31750e04530a3f5c2cfaa86757

    SHA512

    a7cef43a50741c28c5139ff14d653f017396d7fa1cb9c18550b162665744c4f89bce56ad6500c3822f61ea358b9f4990a93559aa7c29de7b2c52f988cc15010f

    Download Submit