Overview
overview
6Static
static
3sketchyori...eTswap
ubuntu-18.04-amd64
6sketchyori...eTswap
debian-9-armhf
1sketchyori...eTswap
debian-9-mips
sketchyori...eTswap
debian-9-mipsel
sketchyori...ty.lnk
windows7-x64
3sketchyori...ty.lnk
windows10-2004-x64
3sketchyori...et.lnk
windows7-x64
3sketchyori...et.lnk
windows10-2004-x64
3sketchyori...ll.lnk
windows7-x64
3sketchyori...ll.lnk
windows10-2004-x64
3sketchyori...ls.lnk
windows7-x64
3sketchyori...ls.lnk
windows10-2004-x64
3sketchyori...ip.lnk
windows7-x64
3sketchyori...ip.lnk
windows10-2004-x64
3sketchyori...og.lnk
windows7-x64
3sketchyori...og.lnk
windows10-2004-x64
3sketchyori...11.lnk
windows7-x64
1sketchyori...11.lnk
windows10-2004-x64
1sketchyori...allpkg
ubuntu-18.04-amd64
6sketchyori...allpkg
debian-9-armhf
1sketchyori...allpkg
debian-9-mips
sketchyori...allpkg
debian-9-mipsel
sketchyori...sm.pdf
windows7-x64
1sketchyori...sm.pdf
windows10-2004-x64
1sketchyori...rg.pdf
windows7-x64
1sketchyori...rg.pdf
windows10-2004-x64
1sketchyori...js.pdf
windows7-x64
1sketchyori...js.pdf
windows10-2004-x64
1sketchyori...js.pdf
windows7-x64
1sketchyori...js.pdf
windows10-2004-x64
1sketchyori...js.pdf
windows7-x64
1sketchyori...js.pdf
windows10-2004-x64
1Resubmissions
12-06-2024 17:05
240612-vmcamasdqh 612-06-2024 16:56
240612-vft7vsscma 712-06-2024 16:50
240612-vcjxqasbna 612-06-2024 16:40
240612-t6wb6swank 6Analysis
-
max time kernel
144s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
12-06-2024 16:40
Static task
static1
Behavioral task
behavioral1
Sample
sketchyorignorant-main/SeTswap
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
sketchyorignorant-main/SeTswap
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
sketchyorignorant-main/SeTswap
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
sketchyorignorant-main/SeTswap
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral5
Sample
sketchyorignorant-main/System and Security.lnk
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
sketchyorignorant-main/System and Security.lnk
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
sketchyorignorant-main/The Internet.lnk
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
sketchyorignorant-main/The Internet.lnk
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
sketchyorignorant-main/Windows Defender Firewall.lnk
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
sketchyorignorant-main/Windows Defender Firewall.lnk
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
sketchyorignorant-main/Windows Tools.lnk
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
sketchyorignorant-main/Windows Tools.lnk
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
sketchyorignorant-main/clamav-1.2.0.win.x64.zip.lnk
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
sketchyorignorant-main/clamav-1.2.0.win.x64.zip.lnk
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
sketchyorignorant-main/error.log.lnk
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
sketchyorignorant-main/error.log.lnk
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
sketchyorignorant-main/https--account.microsoft.com-ref=settings&Platform=Windows11.lnk
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
sketchyorignorant-main/https--account.microsoft.com-ref=settings&Platform=Windows11.lnk
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
sketchyorignorant-main/installpkg
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral20
Sample
sketchyorignorant-main/installpkg
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral21
Sample
sketchyorignorant-main/installpkg
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral22
Sample
sketchyorignorant-main/installpkg
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral23
Sample
sketchyorignorant-main/jar file ___usr_lib_firefox_browser_omni.ja!_chrome_browser_res_activity-stream_lib_ASRoute6r.jsm.pdf
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
sketchyorignorant-main/jar file ___usr_lib_firefox_browser_omni.ja!_chrome_browser_res_activity-stream_lib_ASRoute6r.jsm.pdf
Resource
win10v2004-20240611-en
Behavioral task
behavioral25
Sample
sketchyorignorant-main/jar file ___usr_lib_firefox_omni.ja!_chrome_toolkit_res_messaging-system_targ.pdf
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
sketchyorignorant-main/jar file ___usr_lib_firefox_omni.ja!_chrome_toolkit_res_messaging-system_targ.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
sketchyorignorant-main/jar file ___usr_lib_firefox_omni.ja!_chrome_toolkit_res_messaging-system_targeting_Targe7ting.sys.mjs.pdf
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
sketchyorignorant-main/jar file ___usr_lib_firefox_omni.ja!_chrome_toolkit_res_messaging-system_targeting_Targe7ting.sys.mjs.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
sketchyorignorant-main/jar file ___usr_lib_firefox_omni.ja!_chrome_toolkit_res_messaging-system_targeting_Targeting.sys.5mjs.pdf
Resource
win7-20240611-en
Behavioral task
behavioral30
Sample
sketchyorignorant-main/jar file ___usr_lib_firefox_omni.ja!_chrome_toolkit_res_messaging-system_targeting_Targeting.sys.5mjs.pdf
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
sketchyorignorant-main/jar file ___usr_lib_firefox_omni.ja!_chrome_toolkit_res_messaging-system_targeting_Targeting.sys.mjs.pdf
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
sketchyorignorant-main/jar file ___usr_lib_firefox_omni.ja!_chrome_toolkit_res_messaging-system_targeting_Targeting.sys.mjs.pdf
Resource
win10v2004-20240611-en
General
-
Target
sketchyorignorant-main/jar file ___usr_lib_firefox_omni.ja!_chrome_toolkit_res_messaging-system_targ.pdf
-
Size
17KB
-
MD5
912c7a39f392f1a5d6b3a526bddeaa3b
-
SHA1
59b8a64b5303e6a9bb01403c9077b5baa53bd4ae
-
SHA256
1131e526c04b3ce39339d8b14bdba9c4dc14ee2f4f1a3945290ba9fd8a20c452
-
SHA512
2dfc0cf8e5a672dcc38a0822503d8d8b5d669f6553c885e3953075b851021a509c577738b67351f6b9251495ae1baccae321c747a9d78d7657ef4192de671359
-
SSDEEP
192:QdyPU/nz+8BkjlT1hgy7yhxFej1EmHqD1sXODMcvgwnWX91BxSzD5bWK1EX1aaIT:A/z+8WBhhgy7yhTeCmKtN4roDcUu3ERX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2436 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2436 AcroRd32.exe 2436 AcroRd32.exe 2436 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\sketchyorignorant-main\jar file ___usr_lib_firefox_omni.ja!_chrome_toolkit_res_messaging-system_targ.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2436
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD555d4cc74a17389cef256bc7994a5828f
SHA18d438501746c63f881d1c7e950421e0eb74943d4
SHA256132d9f9ef6c2688d9f405a7083b116aa3737a05d9ba60b194a16f4ebb097a240
SHA51256aa5bde228a202ce03c5a2ea9fb32f6075cda42b20ce2f90ee28a623e3087c8f619bb70a8172d656e04e2ac772fb180eeb9d34209f32fa052b63114eff1ee6d