Analysis
-
max time kernel
171s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
13/10/2023, 18:08
Behavioral task
behavioral1
Sample
NEAS.0e3610eaddcc60940db9c82edd3848e0_JC.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0e3610eaddcc60940db9c82edd3848e0_JC.pdf
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0e3610eaddcc60940db9c82edd3848e0_JC.pdf
-
Size
55KB
-
MD5
0e3610eaddcc60940db9c82edd3848e0
-
SHA1
7acc731a8c7ce168321fded7a918f445738d8582
-
SHA256
7b2808bce1f759c3b87826208cb4323a687556263d7fd2dfc4629af435dc7c58
-
SHA512
afc106397feaa2b6e3e0cdae44b97c1280f91c391fcd45355c7acc7332ec7839ec5d38028efcfd5d5e9275d4af4f4d51081748c4e3bf776fe08be1397fac4b58
-
SSDEEP
768:VzDJzZa/6Mxoun1LKhBCZPe60OnoR5JCEO3N16WKCc6Kr4XSjjFYLpRr8Fy6XBRy:VTwYJCZNZk2SFYLpgdbPCr5mZopS+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2260 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2260 AcroRd32.exe 2260 AcroRd32.exe 2260 AcroRd32.exe 2260 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.0e3610eaddcc60940db9c82edd3848e0_JC.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2260
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52daf55fc73fbe1637fb99a960ee6bc31
SHA1b43d453f9fdcdd980f35e898093a654698271852
SHA25635ecc49551ec375e1061be50ab9e088f678e7efd6d551831ff19b8a7610d95e5
SHA51258e35258e5f22e162a8a85444343af5a87fd187ad9b8ee988013851c5bf90497cb3ae55e783334b004ebd548b4b9a0b581ce2265d602f889e465e9b4624240df