Analysis

  • max time kernel
    137s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2024 05:01

General

  • Target

    MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 PIN.pdf

  • Size

    851KB

  • MD5

    af8906ef025d4d67b19edcda54c1b3a1

  • SHA1

    65ff9ce43e8d8396cf81c355f62fe945cd719b88

  • SHA256

    9ba1616f20ab7fedff7c2d4e85359832682ad1353eb2f65608ae7c0c4ff8cc25

  • SHA512

    82f99d9a5226bbeb2c60a1f1ea1b7d16bd7ec299d5fc030a1126d0628f591ab3d75de6ee808047faa227636059ff5c1d3857d1d8063a98578846200836bf29e4

  • SSDEEP

    12288:Kj20x0l3KcT/c271EPOm60VDubnxnyb4wPYrFToHV/nOBHO0cOLEmYXBMvKK:zhKcTc27+r6yDubxns4kiLEmYXBMvR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef\hardware\MKS Gen_L V2.0_001\MKS Gen_L V2.0_001 PIN.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    43058cf2df8af10d3cc2133a4311a5a8

    SHA1

    a45ea837ab5969c1004ec70ea492807ece3f7f7f

    SHA256

    7d68cc1301a27b0704834176c63e13139e39b57a132123531825950885390c36

    SHA512

    8cc348205d2869d17c225e430a1c3044db936a7c17ebbb2cdece60b9fd419f224eaafe27f45959fd442323f2c0eb46bf401d79313d2f0a66a503b7b133ffec63