Resubmissions

27-06-2024 08:27

240627-kcrbpa1eqa 1

26-06-2024 15:07

240626-shh69ssfmm 1

26-06-2024 15:05

240626-sgahqszcnc 1

09-02-2024 16:32

240209-t2ajxaef77 9

Analysis

  • max time kernel
    104s
  • max time network
    92s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240611-en
  • resource tags

    arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    26-06-2024 15:07

General

  • Target

    pdfelement-pro_setup_full5239.exe

  • Size

    2.1MB

  • MD5

    f83a67cd8a43284b067d47a5b9179fea

  • SHA1

    9de2d9c69f81d0f98b2a4c9eda564e77127d1568

  • SHA256

    4c7baef683a06046badfd3c90cbf922680250687b7d4265a6877aeaaf95f5f17

  • SHA512

    90f240a87e5951db8b50adb9bf446ce855afa5df7218dfd6a4d5272f130c9693652176ccd4e129abed6a3eee1c91c22f5c8010e3c1ba875fa81771cf6fb536fa

  • SSDEEP

    49152:kFwWwzOx2YlkXEYTy0iTvTEaMKCTZQFEgNsEIU3B7uRNroLgi6G:sPwzOPD0cEamgNND

Score
1/10

Malware Config

Signatures

  • Modifies Control Panel 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\pdfelement-pro_setup_full5239.exe
    "C:\Users\Admin\AppData\Local\Temp\pdfelement-pro_setup_full5239.exe"
    1⤵
    • Modifies Control Panel
    • Suspicious use of SetWindowsHookEx
    PID:4624
  • C:\Windows\SysWOW64\werfault.exe
    werfault.exe /h /shared Global\f83fc021ade3437eb7aabff0c70cb0d4 /t 3564 /p 4624
    1⤵
      PID:2052

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\wsduilib.log

      Filesize

      22KB

      MD5

      da3754429f808af3420a4d44665ad655

      SHA1

      d2b0f8aef1e286fa01d28c86eb2e29bd4badea00

      SHA256

      f9063ed61515b41e1f206d92ff1ba9a5a74722d6e21734599969bf5cd58cceac

      SHA512

      1f46c6f4837812add53a73bdb14721e6d02c82575a1629c515bd03579ab519b7bf0e37e72d64a9d26701b2f5094bb00606d5b97bd17b87ce25ac74b742c4ab08