Overview
overview
6Static
static
6MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...IN.pdf
windows7-x64
1MKS-GEN_L-...IN.pdf
windows10-2004-x64
1MKS-GEN_L-...CH.pdf
windows7-x64
1MKS-GEN_L-...CH.pdf
windows10-2004-x64
1MKS-GEN_L-...ZE.pdf
windows7-x64
1MKS-GEN_L-...ZE.pdf
windows10-2004-x64
1MKS-GEN_L-...OP.pdf
windows7-x64
1MKS-GEN_L-...OP.pdf
windows10-2004-x64
1MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...IN.pdf
windows7-x64
1MKS-GEN_L-...IN.pdf
windows10-2004-x64
1MKS-GEN_L-...CH.pdf
windows7-x64
1MKS-GEN_L-...CH.pdf
windows10-2004-x64
1MKS-GEN_L-...ZE.pdf
windows7-x64
1MKS-GEN_L-...ZE.pdf
windows10-2004-x64
1MKS-GEN_L-...OP.pdf
windows7-x64
1MKS-GEN_L-...OP.pdf
windows10-2004-x64
1MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...IN.pdf
windows7-x64
1MKS-GEN_L-...IN.pdf
windows10-2004-x64
1MKS-GEN_L-...CH.pdf
windows7-x64
1MKS-GEN_L-...CH.pdf
windows10-2004-x64
1MKS-GEN_L-...ZE.pdf
windows7-x64
1MKS-GEN_L-...ZE.pdf
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
27-03-2024 05:01
Behavioral task
behavioral1
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOM.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOM.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOTTOM.pdf
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOTTOM.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 PIN.pdf
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 PIN.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 SCH.pdf
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 SCH.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 SIZE.pdf
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 SIZE.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 TOP.pdf
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 TOP.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 BOM.pdf
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 BOM.pdf
Resource
win10v2004-20240319-en
Behavioral task
behavioral15
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 BOTTOM.pdf
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 BOTTOM.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 PIN.pdf
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 PIN.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SCH.pdf
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SCH.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SIZE.pdf
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SIZE.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 TOP.pdf
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 TOP.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 BOTTOM.pdf
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 BOTTOM.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 PIN.pdf
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 PIN.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 SCH.pdf
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 SCH.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 SIZE.pdf
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 SIZE.pdf
Resource
win10v2004-20240226-en
General
-
Target
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 TOP.pdf
-
Size
340KB
-
MD5
b384b58df5bb0eb981740de9ad614865
-
SHA1
2a156e85431d70183c55f648bdd9cf4764cff903
-
SHA256
54abba133c7d9f79beb4c9778dc52d822c2ccbb5b996a36ba7d9677d7a6f015c
-
SHA512
c2745416d56e881397e4b1b72b9eff048cc70599de0abf863c2d60ad3431a7693157d2c7df46b97c83e2334d26e2eb4503b9f915ab542235447fa8abb6898a21
-
SSDEEP
3072:VY+7oc2kpMbR7xdxS6RByi7/yUq7LIM2zEA93lffcx5H8EwYq6nIye72gtnQ8BxE:V57odkpMbRN3jFq7U914R
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2220 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef\hardware\MKS Gen_L V1.0_008\MKS Gen_L V1.0_008 TOP.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c68b4c5c2eb5d43b6cd4370054267cc7
SHA131e859cc9345e06ca8ecbe8c37eb0a15685ce379
SHA25607dbf27f5e73af0f807bbbd12dd9a3affe89dbe4c2ca79667a29757e6b4d82ec
SHA512181e5c06ba4782c0670f70538231b887d826187d7ae12eba959d1c29f0a69e3d1288a5bd7cae7154de4b48e550aa6d658da40438bb76c0209a0ef8bfbfa7752b