Resubmissions
27-06-2024 08:27
240627-kcrbpa1eqa 126-06-2024 15:07
240626-shh69ssfmm 126-06-2024 15:05
240626-sgahqszcnc 109-02-2024 16:32
240209-t2ajxaef77 9Analysis
-
max time kernel
104s -
max time network
92s -
platform
windows11-21h2_x64 -
resource
win11-20240611-en -
resource tags
arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system -
submitted
26-06-2024 15:07
Static task
static1
Behavioral task
behavioral1
Sample
pdfelement-pro_setup_full5239.exe
Resource
win11-20240611-en
General
-
Target
pdfelement-pro_setup_full5239.exe
-
Size
2.1MB
-
MD5
f83a67cd8a43284b067d47a5b9179fea
-
SHA1
9de2d9c69f81d0f98b2a4c9eda564e77127d1568
-
SHA256
4c7baef683a06046badfd3c90cbf922680250687b7d4265a6877aeaaf95f5f17
-
SHA512
90f240a87e5951db8b50adb9bf446ce855afa5df7218dfd6a4d5272f130c9693652176ccd4e129abed6a3eee1c91c22f5c8010e3c1ba875fa81771cf6fb536fa
-
SSDEEP
49152:kFwWwzOx2YlkXEYTy0iTvTEaMKCTZQFEgNsEIU3B7uRNroLgi6G:sPwzOPD0cEamgNND
Malware Config
Signatures
-
Modifies Control Panel 1 IoCs
Processes:
pdfelement-pro_setup_full5239.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-1560405787-796225086-678739705-1000\Control Panel\Desktop\MuiCached pdfelement-pro_setup_full5239.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
pdfelement-pro_setup_full5239.exepid process 4624 pdfelement-pro_setup_full5239.exe 4624 pdfelement-pro_setup_full5239.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\pdfelement-pro_setup_full5239.exe"C:\Users\Admin\AppData\Local\Temp\pdfelement-pro_setup_full5239.exe"1⤵
- Modifies Control Panel
- Suspicious use of SetWindowsHookEx
PID:4624
-
C:\Windows\SysWOW64\werfault.exewerfault.exe /h /shared Global\f83fc021ade3437eb7aabff0c70cb0d4 /t 3564 /p 46241⤵PID:2052
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
22KB
MD5da3754429f808af3420a4d44665ad655
SHA1d2b0f8aef1e286fa01d28c86eb2e29bd4badea00
SHA256f9063ed61515b41e1f206d92ff1ba9a5a74722d6e21734599969bf5cd58cceac
SHA5121f46c6f4837812add53a73bdb14721e6d02c82575a1629c515bd03579ab519b7bf0e37e72d64a9d26701b2f5094bb00606d5b97bd17b87ce25ac74b742c4ab08