Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2024 05:01

General

  • Target

    MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 SCH.pdf

  • Size

    708KB

  • MD5

    4b4d1d9ed3ce8d3beefa9e3a92a6b352

  • SHA1

    8260b484972e927dac0c0de5cd2a757c3aa7ea5d

  • SHA256

    af5eca4748554afa4576af648c7ccae85b38cac89114da9740ed439578a76273

  • SHA512

    445f494faf4fd4f1046ead4150a96470bffe7adafd161ea5e72d9733f2fdcbdb6776cceb5e01110796a0d95c8ef0d2d3ba96adeb33f3175ed37034197280bece

  • SSDEEP

    12288:2O9nFEFE1fwVx+Kpgn5SMzdYwE9dKipwqnt+mUkr6U0J6vT+NBgmyUCu7BUn8wcB:2O3EFE1fwVx+Kpgn5SMzdYwE9dKipwqG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef\hardware\MKS Gen_L V2.1_001\MKS GEN_L V2.1_001 SCH.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9377cc74b1edfefa7bbc70e42931a51b

    SHA1

    f3304caaefdec3422ece381e5ceff4505ffbce65

    SHA256

    e9feab333d77af07eacb523d9431848a3568ad57ac62865ae81ac985398d2519

    SHA512

    26a3892d6b152d961af45d8dd7eba8fd1dff233de16d661a3c0df1766055ef9ec9c4c2ff2660ab7a4978278d1d5135ac3600b8abc6717241eaaa8cdaf9ef59da