Overview
overview
4Static
static
1东明县�...��.doc
windows7-x64
4东明县�...��.doc
windows10-2004-x64
1东明县�...��.doc
windows7-x64
4东明县�...��.doc
windows10-2004-x64
1北王图�...1).pdf
windows7-x64
1北王图�...1).pdf
windows10-2004-x64
1北王图�...2).pdf
windows7-x64
1北王图�...2).pdf
windows10-2004-x64
1北王图�...��.pdf
windows7-x64
1北王图�...��.pdf
windows10-2004-x64
1北王图�...2).pdf
windows7-x64
1北王图�...2).pdf
windows10-2004-x64
1北王图�...3).pdf
windows7-x64
1北王图�...3).pdf
windows10-2004-x64
1北王图�...1).pdf
windows7-x64
1北王图�...1).pdf
windows10-2004-x64
1北王图�...2).pdf
windows7-x64
1北王图�...2).pdf
windows10-2004-x64
1北王图�...3).pdf
windows7-x64
1北王图�...3).pdf
windows10-2004-x64
1北王图�...4).pdf
windows7-x64
1北王图�...4).pdf
windows10-2004-x64
1北王图�...1).pdf
windows7-x64
1北王图�...1).pdf
windows10-2004-x64
1北王图�...2).pdf
windows7-x64
1北王图�...2).pdf
windows10-2004-x64
1北王图�...1).pdf
windows7-x64
1北王图�...1).pdf
windows10-2004-x64
1北王图�...2).pdf
windows7-x64
1北王图�...2).pdf
windows10-2004-x64
1北王图�...1).pdf
windows7-x64
1北王图�...1).pdf
windows10-2004-x64
1Analysis
- max time kernel
118s - max time network
119s - platform
windows7_x64 - resource
win7-20240220-en - resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system - submitted
07/05/2024, 09:51
Static task
static1
Behavioral task
behavioral1
Sample
东明县菜园集镇北王庄等9个村土地整治项目二招标文件.doc
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral2
Sample
东明县菜园集镇北王庄等9个村土地整治项目二招标文件.doc
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
东明县菜园集镇北王等9个村土地治理项目二招标公告.doc
Resource
win7-20240220-en
windows7-x64
Behavioral task
behavioral4
Sample
东明县菜园集镇北王等9个村土地治理项目二招标公告.doc
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
北王图纸/0土方-东坑 Model (1).pdf
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral6
Sample
北王图纸/0土方-东坑 Model (1).pdf
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
北王图纸/0土方-东坑 Model (2).pdf
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral8
Sample
北王图纸/0土方-东坑 Model (2).pdf
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
北王图纸/1-1机井（80m） Model (1)-北王庄.pdf
Resource
win7-20240419-en
windows7-x64
Behavioral task
behavioral10
Sample
北王图纸/1-1机井（80m） Model (1)-北王庄.pdf
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
北王图纸/1-1机井（80m） Model (2).pdf
Resource
win7-20240220-en
windows7-x64
Behavioral task
behavioral12
Sample
北王图纸/1-1机井（80m） Model (2).pdf
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
北王图纸/1-1机井（80m） Model (3).pdf
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral14
Sample
北王图纸/1-1机井（80m） Model (3).pdf
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
北王图纸/2-2、农沟清淤1断面图 Model (1).pdf
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral16
Sample
北王图纸/2-2、农沟清淤1断面图 Model (1).pdf
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
北王图纸/2-2、农沟清淤1断面图 Model (2).pdf
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral18
Sample
北王图纸/2-2、农沟清淤1断面图 Model (2).pdf
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
北王图纸/2-2、农沟清淤1断面图 Model (3).pdf
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral20
Sample
北王图纸/2-2、农沟清淤1断面图 Model (3).pdf
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
北王图纸/2-2、农沟清淤2横截面 Model (4).pdf
Resource
win7-20240419-en
windows7-x64
Behavioral task
behavioral22
Sample
北王图纸/2-2、农沟清淤2横截面 Model (4).pdf
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
北王图纸/3-1、板桥-8m Model (1).pdf
Resource
win7-20240220-en
windows7-x64
Behavioral task
behavioral24
Sample
北王图纸/3-1、板桥-8m Model (1).pdf
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
北王图纸/3-1、板桥-8m Model (2).pdf
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral26
Sample
北王图纸/3-1、板桥-8m Model (2).pdf
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
北王图纸/3-2、板桥-14m Model (1).pdf
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral28
Sample
北王图纸/3-2、板桥-14m Model (1).pdf
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
北王图纸/3-2、板桥-14m Model (2).pdf
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral30
Sample
北王图纸/3-2、板桥-14m Model (2).pdf
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
北王图纸/4-3、1-2-3型涵管 Model (1).pdf
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral32
Sample
北王图纸/4-3、1-2-3型涵管 Model (1).pdf
Resource
win10v2004-20240419-en
windows10-2004-x64
General
- Target 北王图纸/1-1机井（80m） Model (2).pdf
- Size 219KB
- Sample240507-lvhypsdf97
- SHA256 558a3a9110d9b9ce5114c56452d52247eff0e21eeb72ceeb62e40b956aacb4de
- MD5 d9d6895c83e1e3752001bfb993648b50
- SHA1 73d85349731b21abc45441ddd10cf53b2d52ae5a
- SHA512 a0e5dbf49cef5d60476a28195b2006818aa5ea68d992e82b50eb746c2272b478661868dbcc7979ca6e26c293e6dd2f86ae6b0ab9bc4c1643328a4a8cc06fec8a
- SSDEEP 3072:+QCJ2dOza7mlUdU1VQA8kZcq+sYgveFDV736v4eyWGZt467Hf2m6B7Z8W:+QUza76CkSDyoNKweyfh7/ad
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2172 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2172 AcroRd32.exe 2172 AcroRd32.exe 2172 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 a63b2f17375ba4c61ec475428650f0c2809a1667ad98df76538627906af5b2ff
- MD5 13eae5f5b28fbbe8378247ea7b59f82b
- SHA1 4485ff2c9f06c44468ca65da15ba2d69b314b5bd
- SHA512 074b59829f30d9286f55b66a05f537a2ec6da339fd2c42b43b41165a940e59b47798921933ed4a4d298a8a3aa1d7e83b914fea06ab633164448283acd6fb9a11
- MD5 SHA1 SHA512