Overview
overview
6Static
static
6MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...IN.pdf
windows7-x64
1MKS-GEN_L-...IN.pdf
windows10-2004-x64
1MKS-GEN_L-...CH.pdf
windows7-x64
1MKS-GEN_L-...CH.pdf
windows10-2004-x64
1MKS-GEN_L-...ZE.pdf
windows7-x64
1MKS-GEN_L-...ZE.pdf
windows10-2004-x64
1MKS-GEN_L-...OP.pdf
windows7-x64
1MKS-GEN_L-...OP.pdf
windows10-2004-x64
1MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...IN.pdf
windows7-x64
1MKS-GEN_L-...IN.pdf
windows10-2004-x64
1MKS-GEN_L-...CH.pdf
windows7-x64
1MKS-GEN_L-...CH.pdf
windows10-2004-x64
1MKS-GEN_L-...ZE.pdf
windows7-x64
1MKS-GEN_L-...ZE.pdf
windows10-2004-x64
1MKS-GEN_L-...OP.pdf
windows7-x64
1MKS-GEN_L-...OP.pdf
windows10-2004-x64
1MKS-GEN_L-...OM.pdf
windows7-x64
1MKS-GEN_L-...OM.pdf
windows10-2004-x64
1MKS-GEN_L-...IN.pdf
windows7-x64
1MKS-GEN_L-...IN.pdf
windows10-2004-x64
1MKS-GEN_L-...CH.pdf
windows7-x64
1MKS-GEN_L-...CH.pdf
windows10-2004-x64
1MKS-GEN_L-...ZE.pdf
windows7-x64
1MKS-GEN_L-...ZE.pdf
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27-03-2024 05:01
Behavioral task
behavioral1
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOM.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOM.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOTTOM.pdf
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOTTOM.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 PIN.pdf
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 PIN.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 SCH.pdf
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 SCH.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 SIZE.pdf
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 SIZE.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 TOP.pdf
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 TOP.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 BOM.pdf
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 BOM.pdf
Resource
win10v2004-20240319-en
Behavioral task
behavioral15
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 BOTTOM.pdf
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 BOTTOM.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 PIN.pdf
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 PIN.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SCH.pdf
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SCH.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SIZE.pdf
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 SIZE.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 TOP.pdf
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.0_001/MKS Gen_L V2.0_001 TOP.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 BOTTOM.pdf
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 BOTTOM.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 PIN.pdf
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 PIN.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 SCH.pdf
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 SCH.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 SIZE.pdf
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V2.1_001/MKS GEN_L V2.1_001 SIZE.pdf
Resource
win10v2004-20240226-en
General
-
Target
MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOTTOM.pdf
-
Size
290KB
-
MD5
c8a721f347dcb96589492e760c93ed1f
-
SHA1
a30af1932771909476398caa661dc7bb6a8168b4
-
SHA256
801c32c360e0b4fd587cc9dc771e1d31e574abf23e407acd4163beaab08eee0a
-
SHA512
e7b8ca49745d856050f652c0114b0b5562d4dea4369ea405be9122670545ed2eb382883374666d7a9765800a3611572713dfc5f162b0e6c3ecdbe32be75af3e0
-
SSDEEP
3072:65ObvvOiTyIOT17cc51Y43yZnNNHRqdjHjEVNgvm04Iye72gtnQ8Bxx/UmKxuY8j:zL/TyIOTRNaHxEv3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3008 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3008 AcroRd32.exe 3008 AcroRd32.exe 3008 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef\hardware\MKS Gen_L V1.0_008\MKS Gen_L V1.0_008 BOTTOM.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3008
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD562dbcd92f460f6e342355a54fb9ae5ab
SHA1cf5560b051c206d7a7fe2c89874729b97b0b4fdf
SHA256411a6c08a355cfa593a4b3373579038e9d527169e16104be164895b1457221a3
SHA51299be4e5dbdf588bdceab65a36773fca99756cf08f2a05c2704552c6d14a792c01f148c41544c07f461f62d8f846a57da42f1d9f82a4da9f75f71b40bfedaf1fe