Analysis

  • max time kernel
    151s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2023, 14:21

General

  • Target

    NEAS.2041866ba3dea7b67ed83d9caf896870_JC.pdf

  • Size

    264KB

  • MD5

    2041866ba3dea7b67ed83d9caf896870

  • SHA1

    b51e2c71586a8963819b459de601cb780da21d18

  • SHA256

    254ba32d223096478c567eb3fc531bcc9afba12272cd986a1707cb8df34586cd

  • SHA512

    49b92ff74407a5ec3b1b2c44246d3c913feee861db63f44b5fe86ba18515e5cdbc986dbc515f7ed19631215f4757e59ba86ab816d084d205a9fe8dda5c1f1d87

  • SSDEEP

    6144:X746wA2omhFPUhzlXp68bfSEXHMV9xZhV7LH0WCc0HkFzLLHHe90:L49ZMJXp6CpXsnXbBgHCzLTN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.2041866ba3dea7b67ed83d9caf896870_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2008

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c68bf489abc437a07ca49c8a11b0bb73

          SHA1

          f9cfd4f6246c62088f7564266e09009b8c22deb3

          SHA256

          a98da734a66878ed79419139c29d36572c071c94723380b24df1ec5b428c0159

          SHA512

          8b6a24ca784177c21bcf729fb6198a6de7fa8b42cce43fcbf8e31a7785d496c4cf481cd3f907ab8d03be7c3823bcdfc32fc8add46f18e4e3da734dfc98447e40