Analysis
-
max time kernel
150s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
23/10/2023, 18:59
Behavioral task
behavioral1
Sample
NEAS.3d84183f5c3c6994efaf6d076467d4e0_JC.pdf
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.3d84183f5c3c6994efaf6d076467d4e0_JC.pdf
Resource
win10v2004-20231023-en
General
-
Target
NEAS.3d84183f5c3c6994efaf6d076467d4e0_JC.pdf
-
Size
55KB
-
MD5
3d84183f5c3c6994efaf6d076467d4e0
-
SHA1
4728d86e8150dfcb889ac12a5827a6c8aa31f48d
-
SHA256
533e74eddf0013bf2854af66ce36841e78b4f444a339a72d0e13c842b5b03043
-
SHA512
636d2c8a0feb1233388e92474e836c8d63d312793ddf9605e5894b87e23d2be559870eedd23a24f62a0a19b9276dd49e0ba6a96eacd2b13e1b81505e87690fb5
-
SSDEEP
768:kuzdNIggou41dMV+foYlP13fuVuGA4gtx8Q6gOjeJciRlJ:HzIW1dMV+foY5DBX/PxcifJ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1456 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1456 AcroRd32.exe 1456 AcroRd32.exe 1456 AcroRd32.exe 1456 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.3d84183f5c3c6994efaf6d076467d4e0_JC.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1456
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5be45216bc544347744c55b988e60fc15
SHA16e749698f2f9facb1ce28fe6321468b76ca0a2e8
SHA25646a983245cd4d032451d0e0d81abcef89eb564d017b056efb940b29fe7673a33
SHA512e53bd179f42b3a5ff0d679e5d09d3559644d70996028a408177d1659dd78a70817779bf39bfa6f929170e8be05522cc394f3dfdda5d9851db32ec6988e5373cc