Analysis

  • max time kernel
    175s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    16/10/2023, 13:43

General

  • Target

    NEAS.0bbc52b28f02d2667727639ba02a4eb0_JC.pdf

  • Size

    125KB

  • MD5

    0bbc52b28f02d2667727639ba02a4eb0

  • SHA1

    5fd121afc9497b792001a80b91d789bfc3da6b09

  • SHA256

    fb1a56d45cca3d70024d99311eb2f6d733a41a2fdc52f66151dec84b6aebb342

  • SHA512

    bb78affbf4a9b6a328c25eeb9b23a30e0432dcc60721a79718a58a2774fb853555f1ae5a22132452bd11665ebea5869a1f4eb32d1d023dfa781b4e60aca1bd16

  • SSDEEP

    1536:gU/bFU3US80m3GtfiWmX2RgBkLZavodfVBJ3M37XMOANB7YxF5bnCem7syXMTL/J:vbP0jIkUWVb3M3TNwA5DCemoHN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.0bbc52b28f02d2667727639ba02a4eb0_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3036

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5df0281c7438ada54890886ca84a5a98

          SHA1

          cf05b70d33ff03482d35736816eab5cefe81e45e

          SHA256

          d7e6d313fd623da2b33e6a2c46318ec51d1d37cdd4139f20b4df49429069b2ec

          SHA512

          c90b1b31eecc88bc31dd74b25b669e76af42123ac8e05ea701ef58d92249d8a625bcbef681d5c13a6f855240bbb7eda326a0d1f01e684a38ef90bfcb0acf4be1