Resubmissions
12/06/2024, 17:05
240612-vmcamasdqh 612/06/2024, 16:56
240612-vft7vsscma 712/06/2024, 16:50
240612-vcjxqasbna 612/06/2024, 16:40
240612-t6wb6swank 6Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
12/06/2024, 16:40
General
-
Target
sketchyorignorant-main/jar file ___usr_lib_firefox_omni.ja!_chrome_toolkit_res_messaging-system_targeting_Targeting.sys.mjs.pdf
-
Size
17KB
-
MD5
8673bb9a54bed9e0f3bdb97fe356366f
-
SHA1
3d878ac19f81abf6208869a31c8ff35297e99526
-
SHA256
fcd925c1808511fa706c0bd8183f75c37bc2ff4efb3c5ce1d6e53af0f79142e8
-
SHA512
bf0e84dc8d4a0297ffdc03b8ba3e943cca396db9ff6e21959cfe8d8c8992b7604a55c93a2c51a6fac32638856f19d8e3ad8b5d1d4e373141ce55653433c5d191
-
SSDEEP
384:G+Jd+UtgyixUeFtN4roD1UbXDB2wgja0b:G+JUU3mNN4roD1MDSb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\sketchyorignorant-main\jar file ___usr_lib_firefox_omni.ja!_chrome_toolkit_res_messaging-system_targeting_Targeting.sys.mjs.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD599c55c685a09a572ca4bd0a468cb4b2b
SHA14aa66fc1675c3e6de93ce8b02b86984667378ada
SHA256d5bce02fc4be9cffdb5e7e103bb21d74425b1fde60a3a69aa6a72ac782d068b6
SHA5122073faef8caed4f932ceaddddba9c9ce60a9871374f960113d5957e8ba6fd20acda59fe0e3e8930be5df6c9129c333149725f64655c827ef580dba77800624bb