Analysis
-
max time kernel
151s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
14/10/2023, 14:21
Behavioral task
behavioral1
Sample
NEAS.2041866ba3dea7b67ed83d9caf896870_JC.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.2041866ba3dea7b67ed83d9caf896870_JC.pdf
Resource
win10v2004-20230915-en
General
-
Target
NEAS.2041866ba3dea7b67ed83d9caf896870_JC.pdf
-
Size
264KB
-
MD5
2041866ba3dea7b67ed83d9caf896870
-
SHA1
b51e2c71586a8963819b459de601cb780da21d18
-
SHA256
254ba32d223096478c567eb3fc531bcc9afba12272cd986a1707cb8df34586cd
-
SHA512
49b92ff74407a5ec3b1b2c44246d3c913feee861db63f44b5fe86ba18515e5cdbc986dbc515f7ed19631215f4757e59ba86ab816d084d205a9fe8dda5c1f1d87
-
SSDEEP
6144:X746wA2omhFPUhzlXp68bfSEXHMV9xZhV7LH0WCc0HkFzLLHHe90:L49ZMJXp6CpXsnXbBgHCzLTN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2008 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2008 AcroRd32.exe 2008 AcroRd32.exe 2008 AcroRd32.exe 2008 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.2041866ba3dea7b67ed83d9caf896870_JC.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2008
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c68bf489abc437a07ca49c8a11b0bb73
SHA1f9cfd4f6246c62088f7564266e09009b8c22deb3
SHA256a98da734a66878ed79419139c29d36572c071c94723380b24df1ec5b428c0159
SHA5128b6a24ca784177c21bcf729fb6198a6de7fa8b42cce43fcbf8e31a7785d496c4cf481cd3f907ab8d03be7c3823bcdfc32fc8add46f18e4e3da734dfc98447e40