Resubmissions

12-06-2024 17:05

240612-vmcamasdqh 6

12-06-2024 16:56

240612-vft7vsscma 7

12-06-2024 16:50

240612-vcjxqasbna 6

12-06-2024 16:40

240612-t6wb6swank 6

Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12-06-2024 16:40

General

  • Target

    sketchyorignorant-main/jar file ___usr_lib_firefox_browser_omni.ja!_chrome_browser_res_activity-stream_lib_ASRoute6r.jsm.pdf

  • Size

    60KB

  • MD5

    c198973a1c135cab45e72fcaaa27ee22

  • SHA1

    7f9e1de5a3de552e08ba831f919ade82aea8b23f

  • SHA256

    d8c0a5628523021d289fe4e5dbb43ea77f6a5e2c073a343f89a814fde0357518

  • SHA512

    ade7b7f774c40c54546857af0e47c6b5de45b56c41e866372ceb0ec408ac73d1e22a27eaacee3302765e28108afa147232a97fc716e537962ce1e5a6742a61b2

  • SSDEEP

    1536:RBSIDricBs7o+daVwesSMMR5KkaezjlnMHLQMkr4JRzd:hD2As7RaVwes635j5MHLQM8sd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\sketchyorignorant-main\jar file ___usr_lib_firefox_browser_omni.ja!_chrome_browser_res_activity-stream_lib_ASRoute6r.jsm.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    4d751fc877f6e6788768ba1dcdea4997

    SHA1

    7d2d6abf4ab13956075362f2c9833060ad648d50

    SHA256

    a64b9d9ca49189e37639b6c065f5b570e8c3f95af670b262cfdab854eec224a9

    SHA512

    debc956246692adabf0e6b87280a510adb557e797202970a663539e6054afeddec67cc0f71bd8b2f4bb979db81f391fed491e94246a772862ca73718dea907c1