Analysis

  • max time kernel
    150s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    16/10/2023, 14:31

General

  • Target

    NEAS.10bbcfe5f29a4646e2526c50bacd1f70_JC.pdf

  • Size

    55KB

  • MD5

    10bbcfe5f29a4646e2526c50bacd1f70

  • SHA1

    8a48ebb92191c1446a33e6e1c969dad6c561caa0

  • SHA256

    92570283bc1750a678d84e6387923452a584bd581cc54f012a4ad99988032b03

  • SHA512

    dcdf71746e2c667b0b65dd6d2314a844360d6ff33a93e33225edf6dac47df5211c304ca0d396f96afe6f0f676b51a0c9266834f128834b51e4522e0de4231155

  • SSDEEP

    1536:GCk1WlZpln40dNQ0GIWmRPWHBqa6goDTxqbFznjskA:awlTu0dNQ0GIot6XDIbFb0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.10bbcfe5f29a4646e2526c50bacd1f70_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2436

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0ee54088da98915ab819cf31e5635e02

          SHA1

          e046616b8bf3a294ef49ca594401af8158e81ff6

          SHA256

          36f594e97eaa7244c258d8682a46853b19dc0e87fba6cef767b0dc844b4478cc

          SHA512

          e56d7e9c50d3dfb7fe63292c4698b8961a6cd2d2477541dc0471c1382648bbd70e2967eb7c033c43d798b84f6622d6bf5a39cc78b0e2a27bb6ef68e0019ba7b1