Analysis

  • max time kernel
    171s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    13/10/2023, 18:08

General

  • Target

    NEAS.0e3610eaddcc60940db9c82edd3848e0_JC.pdf

  • Size

    55KB

  • MD5

    0e3610eaddcc60940db9c82edd3848e0

  • SHA1

    7acc731a8c7ce168321fded7a918f445738d8582

  • SHA256

    7b2808bce1f759c3b87826208cb4323a687556263d7fd2dfc4629af435dc7c58

  • SHA512

    afc106397feaa2b6e3e0cdae44b97c1280f91c391fcd45355c7acc7332ec7839ec5d38028efcfd5d5e9275d4af4f4d51081748c4e3bf776fe08be1397fac4b58

  • SSDEEP

    768:VzDJzZa/6Mxoun1LKhBCZPe60OnoR5JCEO3N16WKCc6Kr4XSjjFYLpRr8Fy6XBRy:VTwYJCZNZk2SFYLpgdbPCr5mZopS+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.0e3610eaddcc60940db9c82edd3848e0_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2260

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2daf55fc73fbe1637fb99a960ee6bc31

          SHA1

          b43d453f9fdcdd980f35e898093a654698271852

          SHA256

          35ecc49551ec375e1061be50ab9e088f678e7efd6d551831ff19b8a7610d95e5

          SHA512

          58e35258e5f22e162a8a85444343af5a87fd187ad9b8ee988013851c5bf90497cb3ae55e783334b004ebd548b4b9a0b581ce2265d602f889e465e9b4624240df