Overview
overview
10Static
static
4HowToBeatP...ci.pdf
windows7-x64
1HowToBeatP...ci.pdf
windows10-2004-x64
1NEW PAYPAL...14.pdf
windows7-x64
1NEW PAYPAL...14.pdf
windows10-2004-x64
1PolishPaypal.pdf
windows7-x64
1PolishPaypal.pdf
windows10-2004-x64
1Profiting ...i.html
windows7-x64
1Profiting ...i.html
windows10-2004-x64
1ScrewPaypal.pdf
windows7-x64
1ScrewPaypal.pdf
windows10-2004-x64
1StealthPaypal.pdf
windows7-x64
1StealthPaypal.pdf
windows10-2004-x64
1The Ultima...de.pdf
windows7-x64
1The Ultima...de.pdf
windows10-2004-x64
1Unlimited ...ut.pdf
windows7-x64
1Unlimited ...ut.pdf
windows10-2004-x64
1Yasuo.Payp....5.lnk
windows7-x64
10Yasuo.Payp....5.lnk
windows10-2004-x64
10files/Yasu....5.exe
windows7-x64
10files/Yasu....5.exe
windows10-2004-x64
10paypal stealth.pdf
windows7-x64
1paypal stealth.pdf
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
07-06-2024 19:08
Behavioral task
behavioral1
Sample
HowToBeatPayPal-preci.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
HowToBeatPayPal-preci.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
NEW PAYPAL CASHOUT 2014.pdf
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
NEW PAYPAL CASHOUT 2014.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
PolishPaypal.pdf
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
PolishPaypal.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Profiting from Paypal - TCF Wiki.html
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Profiting from Paypal - TCF Wiki.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
ScrewPaypal.pdf
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
ScrewPaypal.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
StealthPaypal.pdf
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
StealthPaypal.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
The Ultimate Privacy Guide.pdf
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
The Ultimate Privacy Guide.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Unlimited Stealth PayPal Acts and how to Cash them out.pdf
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
Unlimited Stealth PayPal Acts and how to Cash them out.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
Yasuo.Paypal.v4.5.5.5.lnk
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
Yasuo.Paypal.v4.5.5.5.lnk
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
files/Yasuo.Paypal.v4.5.5.5.exe
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
files/Yasuo.Paypal.v4.5.5.5.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
paypal stealth.pdf
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
paypal stealth.pdf
Resource
win10v2004-20240508-en
General
-
Target
PolishPaypal.pdf
-
Size
40KB
-
MD5
8ccd0910daa227a0333e7198aa698a8e
-
SHA1
0232b99524d17c26fa09bfa2230f5fb7aadf433a
-
SHA256
1913f5048d667984b35b89f695b26e52d398034d222736c1d0d5120a9f8431c6
-
SHA512
a9286c7d1211992f81cd88bd5f33142f6beea2e71cd311cdd52878e84900f6476c2254879a56f3da5e69992e63d9cc73b4a74c72657e271e63269efdc69eff71
-
SSDEEP
768:TN/EfO0OMYgixR0HsWlLox4Vk4PBO6tRckYl0HPfmd1a4dtkRgmT2nMDzssdvJfd:VE5QgUyxYGr5xRckYl0HP+dQgs2n+Rl
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1684 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1684 AcroRd32.exe 1684 AcroRd32.exe 1684 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5325136d24383076aef44e8794761d3d2
SHA1a29d3d66388b1d1e78319e6752b1e8fcbb452242
SHA256a177baf496082f191bdd91e7f107b03a2407a9b23ff5ee681ccb3ced6fba3976
SHA5127693b6954b2abe65c9ecf62c114787f7f23deaa4bb7529b12f5c345dcd12791b3a1f6460c2a09ca115efdf61dd752c3060a82dcc19d31c8b79da6a3382a59af3