Analysis
-
max time kernel
150s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
11/10/2023, 15:49
Behavioral task
behavioral1
Sample
NEAS.02cc524cec7ba5f8a976a046e706f0e0_JC.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.02cc524cec7ba5f8a976a046e706f0e0_JC.pdf
Resource
win10v2004-20230915-en
General
-
Target
NEAS.02cc524cec7ba5f8a976a046e706f0e0_JC.pdf
-
Size
73KB
-
MD5
02cc524cec7ba5f8a976a046e706f0e0
-
SHA1
c7975ebf2249a012cf0bab70a37b6277abb0a353
-
SHA256
cd08e732df9a72d953a9606f876eb7806a2f2cf5166ff90f94a2ab36b78b27eb
-
SHA512
70577f11aff57942bfc5a7e2ebf908d56edf7bd30461d6b404b718530a3a9079bf01c3353d03a8a4f50284a4941c9219faada4aaeff72d211a4c182d164181f4
-
SSDEEP
768:VzKYzGeq4zPUIOIzBKz7sbLe+qad1/NTJ9yG9Mic2KeI7KIeBccbztsRP6f5tDEb:uDjNKDq92h8YgddojvRP66q5p/km
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1796 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 1796 AcroRd32.exe 1796 AcroRd32.exe 1796 AcroRd32.exe 1796 AcroRd32.exe 1796 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.02cc524cec7ba5f8a976a046e706f0e0_JC.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1796
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5af43c3f292e168f6a5e30487198ae586
SHA180b397daf47724cd71722b77ce8245913f390fb6
SHA2568a1d9d36a7fdb06e5377fc5c52c2e2631b35c6ee2aabfe2a7319bf6a600884ea
SHA5121fb0441731e5eee2f3651c55b035933ced7153ed1a341850df241efd7b10cc6c9388e556a2c9823488a131ea82e77464bf1fbb32850276d5a75d18830c9d22af