Analysis
-
max time kernel
175s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
16/10/2023, 13:43
Behavioral task
behavioral1
Sample
NEAS.0bbc52b28f02d2667727639ba02a4eb0_JC.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.0bbc52b28f02d2667727639ba02a4eb0_JC.pdf
Resource
win10v2004-20230915-en
General
-
Target
NEAS.0bbc52b28f02d2667727639ba02a4eb0_JC.pdf
-
Size
125KB
-
MD5
0bbc52b28f02d2667727639ba02a4eb0
-
SHA1
5fd121afc9497b792001a80b91d789bfc3da6b09
-
SHA256
fb1a56d45cca3d70024d99311eb2f6d733a41a2fdc52f66151dec84b6aebb342
-
SHA512
bb78affbf4a9b6a328c25eeb9b23a30e0432dcc60721a79718a58a2774fb853555f1ae5a22132452bd11665ebea5869a1f4eb32d1d023dfa781b4e60aca1bd16
-
SSDEEP
1536:gU/bFU3US80m3GtfiWmX2RgBkLZavodfVBJ3M37XMOANB7YxF5bnCem7syXMTL/J:vbP0jIkUWVb3M3TNwA5DCemoHN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3036 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3036 AcroRd32.exe 3036 AcroRd32.exe 3036 AcroRd32.exe 3036 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.0bbc52b28f02d2667727639ba02a4eb0_JC.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3036
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55df0281c7438ada54890886ca84a5a98
SHA1cf05b70d33ff03482d35736816eab5cefe81e45e
SHA256d7e6d313fd623da2b33e6a2c46318ec51d1d37cdd4139f20b4df49429069b2ec
SHA512c90b1b31eecc88bc31dd74b25b669e76af42123ac8e05ea701ef58d92249d8a625bcbef681d5c13a6f855240bbb7eda326a0d1f01e684a38ef90bfcb0acf4be1