Overview
overview
6Static
static
6MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...IN.pdf
windows7-x64
1MKS-GEN_L-...IN.pdf
windows10-2004-x64
1MKS-GEN_L-...CH.pdf
windows7-x64
1MKS-GEN_L-...CH.pdf
windows10-2004-x64
1MKS-GEN_L-...ZE.pdf
windows7-x64
1MKS-GEN_L-...ZE.pdf
windows10-2004-x64
1MKS-GEN_L-...OP.pdf
windows7-x64
1MKS-GEN_L-...OP.pdf
windows10-2004-x64
1MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...IN.pdf
windows7-x64
1MKS-GEN_L-...IN.pdf
windows10-2004-x64
1MKS-GEN_L-...CH.pdf
windows7-x64
1MKS-GEN_L-...CH.pdf
windows10-2004-x64
1MKS-GEN_L-...ZE.pdf
windows7-x64
1MKS-GEN_L-...ZE.pdf
windows10-2004-x64
1MKS-GEN_L-...OP.pdf
windows7-x64
1MKS-GEN_L-...OP.pdf
windows10-2004-x64
1MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...IN.pdf
windows7-x64
1MKS-GEN_L-...IN.pdf
windows10-2004-x64
1MKS-GEN_L-...CH.pdf
windows7-x64
1MKS-GEN_L-...CH.pdf
windows10-2004-x64
1MKS-GEN_L-...ZE.pdf
windows7-x64
1MKS-GEN_L-...ZE.pdf
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27-03-2024 05:01
Behavioral task
behavioral1
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOM.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOM.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOTTOM.pdf
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOTTOM.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 PIN.pdf
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 PIN.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 SCH.pdf
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 SCH.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 SIZE.pdf
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 SIZE.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 TOP.pdf
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 TOP.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 BOM.pdf
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 BOM.pdf
Resource
win10v2004-20240319-en
Behavioral task
behavioral15
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 BOTTOM.pdf
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 BOTTOM.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 PIN.pdf
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 PIN.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SCH.pdf
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SCH.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SIZE.pdf
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SIZE.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 TOP.pdf
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 TOP.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 BOTTOM.pdf
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 BOTTOM.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 PIN.pdf
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 PIN.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 SCH.pdf
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 SCH.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 SIZE.pdf
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 SIZE.pdf
Resource
win10v2004-20240226-en
General
-
Target
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SCH.pdf
-
Size
331KB
-
MD5
73e2c8c98846d600087bacded15a7eaa
-
SHA1
fd86d016e4418c496ff4c98773491ae8ede05f9c
-
SHA256
484baf159f44b243e78239643526baf22a6f007e5bfc8d94758f5418db5d47da
-
SHA512
d83d9ac6ae4962326d80ee96050c894ce2d12188c2177715870db3cbbcbec011350708796f357c0cc2510883fa5ce3ade28d0854a047d6ea4e938aa612c942cf
-
SSDEEP
3072:vJu4z+XZ9y9uzWue1UgQyiLpCHHeE9EVEb4W8xg93bVvqOmep5hT2pJelnG/:vgCwZo9uzWueOZzpY5hT2pY6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2408 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2408 AcroRd32.exe 2408 AcroRd32.exe 2408 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef\hardware\MKS Gen_L V2.0_001\MKS Gen_L V2.0_001 SCH.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2408
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55ff7de6ad3f3c72567f9cee4c2fbbb2e
SHA1bf7a75939b395d0e18292e7f68f900b8da67087a
SHA2565a8d609c3b714b757dc0602bd77b408dbde48ed80ff0dc6da2547f0b9a1ae09d
SHA51234a88e3c25f41d5838e9a7132899eccf4e9f6e2304b7d41d94783ace7385fd8b186ad34fc57efe7ded20a11cfdf0e7c94407eaec29bd9968580ee6c6cd234d91