Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2024 05:01

General

  • Target

    MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 TOP.pdf

  • Size

    340KB

  • MD5

    b384b58df5bb0eb981740de9ad614865

  • SHA1

    2a156e85431d70183c55f648bdd9cf4764cff903

  • SHA256

    54abba133c7d9f79beb4c9778dc52d822c2ccbb5b996a36ba7d9677d7a6f015c

  • SHA512

    c2745416d56e881397e4b1b72b9eff048cc70599de0abf863c2d60ad3431a7693157d2c7df46b97c83e2334d26e2eb4503b9f915ab542235447fa8abb6898a21

  • SSDEEP

    3072:VY+7oc2kpMbR7xdxS6RByi7/yUq7LIM2zEA93lffcx5H8EwYq6nIye72gtnQ8BxE:V57odkpMbRN3jFq7U914R

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef\hardware\MKS Gen_L V1.0_008\MKS Gen_L V1.0_008 TOP.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c68b4c5c2eb5d43b6cd4370054267cc7

    SHA1

    31e859cc9345e06ca8ecbe8c37eb0a15685ce379

    SHA256

    07dbf27f5e73af0f807bbbd12dd9a3affe89dbe4c2ca79667a29757e6b4d82ec

    SHA512

    181e5c06ba4782c0670f70538231b887d826187d7ae12eba959d1c29f0a69e3d1288a5bd7cae7154de4b48e550aa6d658da40438bb76c0209a0ef8bfbfa7752b