Analysis
-
max time kernel
151s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
22/10/2023, 18:02
Behavioral task
behavioral1
Sample
NEAS.d534a6e65fbb954e6183779c1f1b20e0.pdf
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d534a6e65fbb954e6183779c1f1b20e0.pdf
Resource
win10v2004-20231020-en
General
-
Target
NEAS.d534a6e65fbb954e6183779c1f1b20e0.pdf
-
Size
352KB
-
MD5
d534a6e65fbb954e6183779c1f1b20e0
-
SHA1
98708709829158ae40e016e4dedde75682c9ba5d
-
SHA256
0f357dffda8b0d86b0cd6243884a728425e28e7ad1df2c74e8bb5ca7c40235e2
-
SHA512
bd046bfca801d3d8f07b6567f7bc4df01ac4da3f152919dda71ad47c78fe8bfc66e1520c6b15210d2e1c9097214812bbf76b0f13631daf67b8fbb7ef4e50caf4
-
SSDEEP
6144:SuMgJksgumGWY/VTqs6YBZUStgZWvnGmBxkHo2SRaYSDATqncXqsPB1A1:42RuVCOrYblgWnGeN21DAThXqsTA1
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1480 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1480 AcroRd32.exe 1480 AcroRd32.exe 1480 AcroRd32.exe 1480 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c5dfbcaeff16208f98fc792fa5878307
SHA1841a0c51f47dda107bb49d4f3a2311116bb93e4e
SHA2560b85fdfec6756e2c17044ee78dec630852a07963b8cb3d2f99f1b3324ace10a0
SHA512b417cd6b38ac12976b468629a67bbd110a4f714de6977bed91fa3b19549e05e97d0330cb7c1789866b8e6a2f5f681f4e97efb6a4c54115766e32e2be914ca36b