Analysis
-
max time kernel
150s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
22/10/2023, 17:54
Behavioral task
behavioral1
Sample
NEAS.7b9937e8750e01f429109b578057e5f0_JC.pdf
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.7b9937e8750e01f429109b578057e5f0_JC.pdf
Resource
win10v2004-20231020-en
General
-
Target
NEAS.7b9937e8750e01f429109b578057e5f0_JC.pdf
-
Size
129KB
-
MD5
7b9937e8750e01f429109b578057e5f0
-
SHA1
1773b98cf58a29cd3c5bcb2cf935e054072ebd82
-
SHA256
13105ac773e891b707c723b7b565978fc80d499752e903f1771b73ec91170a6d
-
SHA512
8daf2b0f487fe0082499dda66638de84ac88f9a95b58371dc0d478c0cb5fc2da57143a203099d05ba03f059b8655058756a39a5563e73b85585faabc9432944a
-
SSDEEP
3072:Wm9tzTZK5zYKz4W2OkoJIG/ahjnvBmH7m5hjZmf6Q+oe:99tpc4OkoGaKjnvB+mcf6noe
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2012 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2012 AcroRd32.exe 2012 AcroRd32.exe 2012 AcroRd32.exe 2012 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.7b9937e8750e01f429109b578057e5f0_JC.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2012
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55519b37cea205aef473646972973aa5b
SHA1cf5b08459e3f166a079cdfe00b886b47f48ebc5f
SHA2562a339b48775fee744dd388f9e2be175db4c202fa9c01cf0cd034901455d8d16f
SHA512ea1cddeff3ced795462194e2119bd31a0c0882d5f6ef3ec03b817210b19072ff7d4d52225c418ff72bd8b1b5dbb157530ee80ed6323f93dbd651b87ae5eab505