Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2024 05:01

General

  • Target

    MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 BOTTOM.pdf

  • Size

    290KB

  • MD5

    c8a721f347dcb96589492e760c93ed1f

  • SHA1

    a30af1932771909476398caa661dc7bb6a8168b4

  • SHA256

    801c32c360e0b4fd587cc9dc771e1d31e574abf23e407acd4163beaab08eee0a

  • SHA512

    e7b8ca49745d856050f652c0114b0b5562d4dea4369ea405be9122670545ed2eb382883374666d7a9765800a3611572713dfc5f162b0e6c3ecdbe32be75af3e0

  • SSDEEP

    3072:65ObvvOiTyIOT17cc51Y43yZnNNHRqdjHjEVNgvm04Iye72gtnQ8Bxx/UmKxuY8j:zL/TyIOTRNaHxEv3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef\hardware\MKS Gen_L V1.0_008\MKS Gen_L V1.0_008 BOTTOM.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    62dbcd92f460f6e342355a54fb9ae5ab

    SHA1

    cf5560b051c206d7a7fe2c89874729b97b0b4fdf

    SHA256

    411a6c08a355cfa593a4b3373579038e9d527169e16104be164895b1457221a3

    SHA512

    99be4e5dbdf588bdceab65a36773fca99756cf08f2a05c2704552c6d14a792c01f148c41544c07f461f62d8f846a57da42f1d9f82a4da9f75f71b40bfedaf1fe