Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    22/10/2023, 17:54

General

  • Target

    NEAS.7b9937e8750e01f429109b578057e5f0_JC.pdf

  • Size

    129KB

  • MD5

    7b9937e8750e01f429109b578057e5f0

  • SHA1

    1773b98cf58a29cd3c5bcb2cf935e054072ebd82

  • SHA256

    13105ac773e891b707c723b7b565978fc80d499752e903f1771b73ec91170a6d

  • SHA512

    8daf2b0f487fe0082499dda66638de84ac88f9a95b58371dc0d478c0cb5fc2da57143a203099d05ba03f059b8655058756a39a5563e73b85585faabc9432944a

  • SSDEEP

    3072:Wm9tzTZK5zYKz4W2OkoJIG/ahjnvBmH7m5hjZmf6Q+oe:99tpc4OkoGaKjnvB+mcf6noe

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.7b9937e8750e01f429109b578057e5f0_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2012

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5519b37cea205aef473646972973aa5b

          SHA1

          cf5b08459e3f166a079cdfe00b886b47f48ebc5f

          SHA256

          2a339b48775fee744dd388f9e2be175db4c202fa9c01cf0cd034901455d8d16f

          SHA512

          ea1cddeff3ced795462194e2119bd31a0c0882d5f6ef3ec03b817210b19072ff7d4d52225c418ff72bd8b1b5dbb157530ee80ed6323f93dbd651b87ae5eab505