Overview
overview
10Static
static
4HowToBeatP...ci.pdf
windows7-x64
1HowToBeatP...ci.pdf
windows10-2004-x64
1NEW PAYPAL...14.pdf
windows7-x64
1NEW PAYPAL...14.pdf
windows10-2004-x64
1PolishPaypal.pdf
windows7-x64
1PolishPaypal.pdf
windows10-2004-x64
1Profiting ...i.html
windows7-x64
1Profiting ...i.html
windows10-2004-x64
1ScrewPaypal.pdf
windows7-x64
1ScrewPaypal.pdf
windows10-2004-x64
1StealthPaypal.pdf
windows7-x64
1StealthPaypal.pdf
windows10-2004-x64
1The Ultima...de.pdf
windows7-x64
1The Ultima...de.pdf
windows10-2004-x64
1Unlimited ...ut.pdf
windows7-x64
1Unlimited ...ut.pdf
windows10-2004-x64
1Yasuo.Payp....5.lnk
windows7-x64
10Yasuo.Payp....5.lnk
windows10-2004-x64
10files/Yasu....5.exe
windows7-x64
10files/Yasu....5.exe
windows10-2004-x64
10paypal stealth.pdf
windows7-x64
1paypal stealth.pdf
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
07-06-2024 19:08
Behavioral task
behavioral1
Sample
HowToBeatPayPal-preci.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
HowToBeatPayPal-preci.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
NEW PAYPAL CASHOUT 2014.pdf
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
NEW PAYPAL CASHOUT 2014.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
PolishPaypal.pdf
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
PolishPaypal.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Profiting from Paypal - TCF Wiki.html
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Profiting from Paypal - TCF Wiki.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
ScrewPaypal.pdf
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
ScrewPaypal.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
StealthPaypal.pdf
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
StealthPaypal.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
The Ultimate Privacy Guide.pdf
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
The Ultimate Privacy Guide.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Unlimited Stealth PayPal Acts and how to Cash them out.pdf
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
Unlimited Stealth PayPal Acts and how to Cash them out.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
Yasuo.Paypal.v4.5.5.5.lnk
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
Yasuo.Paypal.v4.5.5.5.lnk
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
files/Yasuo.Paypal.v4.5.5.5.exe
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
files/Yasuo.Paypal.v4.5.5.5.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
paypal stealth.pdf
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
paypal stealth.pdf
Resource
win10v2004-20240508-en
General
-
Target
NEW PAYPAL CASHOUT 2014.pdf
-
Size
679KB
-
MD5
91d968587dcf2a59e28d35cd4ddd18c4
-
SHA1
05ec0b7512a0bde9b1dceef4663fff7772c11bcf
-
SHA256
b77a664c1dc520e85f4a6b7ddd8049b50eb4052b20a01e2a94b3345777f41ae8
-
SHA512
dbc5ed3b1a996e332c3e139982390e79de0c82f5815b4d8e15f7cb11bb4872f6eac313ae298d4b19bf4a3e626d32b9270a00a26fb2d4049eadcd947bd6876652
-
SSDEEP
12288:jpSeeG4cKCz94eviwnFIKA0uYqjoTRE5K36GMGDl8IU8vBE0Y6t6t6cIOgv09zOA:j0c4cKCz94ejnGx9jcROo6GMGDfU0B4n
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2184 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2184 AcroRd32.exe 2184 AcroRd32.exe 2184 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c9acf9220253977fa5d1f109642c54d5
SHA11a3f54cf79db0e7fcd5e0e1b4c49202da50d6972
SHA256024e8f91e40c2eb13eae7251e73f16cd9e4fe766102e7c0cc97994404f6efd62
SHA5123277cca1b6ce0d760a0bb745cbd18e274f050e5374cc0999db0bbfee80bcd692a0912fa3451abae9037f035ce3b436b8c0663e6aff61d970b945c261e8898e21