Analysis
-
max time kernel
150s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
16/10/2023, 14:31
Behavioral task
behavioral1
Sample
NEAS.10bbcfe5f29a4646e2526c50bacd1f70_JC.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.10bbcfe5f29a4646e2526c50bacd1f70_JC.pdf
Resource
win10v2004-20230915-en
General
-
Target
NEAS.10bbcfe5f29a4646e2526c50bacd1f70_JC.pdf
-
Size
55KB
-
MD5
10bbcfe5f29a4646e2526c50bacd1f70
-
SHA1
8a48ebb92191c1446a33e6e1c969dad6c561caa0
-
SHA256
92570283bc1750a678d84e6387923452a584bd581cc54f012a4ad99988032b03
-
SHA512
dcdf71746e2c667b0b65dd6d2314a844360d6ff33a93e33225edf6dac47df5211c304ca0d396f96afe6f0f676b51a0c9266834f128834b51e4522e0de4231155
-
SSDEEP
1536:GCk1WlZpln40dNQ0GIWmRPWHBqa6goDTxqbFznjskA:awlTu0dNQ0GIot6XDIbFb0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2436 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2436 AcroRd32.exe 2436 AcroRd32.exe 2436 AcroRd32.exe 2436 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.10bbcfe5f29a4646e2526c50bacd1f70_JC.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2436
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50ee54088da98915ab819cf31e5635e02
SHA1e046616b8bf3a294ef49ca594401af8158e81ff6
SHA25636f594e97eaa7244c258d8682a46853b19dc0e87fba6cef767b0dc844b4478cc
SHA512e56d7e9c50d3dfb7fe63292c4698b8961a6cd2d2477541dc0471c1382648bbd70e2967eb7c033c43d798b84f6622d6bf5a39cc78b0e2a27bb6ef68e0019ba7b1