Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2024 05:01

General

  • Target

    MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SCH.pdf

  • Size

    331KB

  • MD5

    73e2c8c98846d600087bacded15a7eaa

  • SHA1

    fd86d016e4418c496ff4c98773491ae8ede05f9c

  • SHA256

    484baf159f44b243e78239643526baf22a6f007e5bfc8d94758f5418db5d47da

  • SHA512

    d83d9ac6ae4962326d80ee96050c894ce2d12188c2177715870db3cbbcbec011350708796f357c0cc2510883fa5ce3ade28d0854a047d6ea4e938aa612c942cf

  • SSDEEP

    3072:vJu4z+XZ9y9uzWue1UgQyiLpCHHeE9EVEb4W8xg93bVvqOmep5hT2pJelnG/:vgCwZo9uzWueOZzpY5hT2pY6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef\hardware\MKS Gen_L V2.0_001\MKS Gen_L V2.0_001 SCH.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5ff7de6ad3f3c72567f9cee4c2fbbb2e

    SHA1

    bf7a75939b395d0e18292e7f68f900b8da67087a

    SHA256

    5a8d609c3b714b757dc0602bd77b408dbde48ed80ff0dc6da2547f0b9a1ae09d

    SHA512

    34a88e3c25f41d5838e9a7132899eccf4e9f6e2304b7d41d94783ace7385fd8b186ad34fc57efe7ded20a11cfdf0e7c94407eaec29bd9968580ee6c6cd234d91