Analysis
-
max time kernel
150s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
23/10/2023, 20:00
Behavioral task
behavioral1
Sample
NEAS.3e075aa4a8346db7543b692c37d9c640_JC.pdf
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.3e075aa4a8346db7543b692c37d9c640_JC.pdf
Resource
win10v2004-20231020-en
General
-
Target
NEAS.3e075aa4a8346db7543b692c37d9c640_JC.pdf
-
Size
70KB
-
MD5
3e075aa4a8346db7543b692c37d9c640
-
SHA1
8c05a7871defb8db52601b2a935fe3ea18ca967e
-
SHA256
6b9116bc699a2371bf9020e919f543197b2afc66f2cc9c2f7f06201b0be70626
-
SHA512
cc3d0cdcc8c08a4225fdf697b7a610eb12cea7ccbbb4401503011276c695e6f2eac75fb5c359866456a3f27c33a18977aa2c426f5f69a67c9c664bd301496286
-
SSDEEP
1536:VdqGVLo8u4ROtfLm9TnOXCgDF2222W45RrWZnx:VdqGVkAAtyOyus45Rrqnx
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2252 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2252 AcroRd32.exe 2252 AcroRd32.exe 2252 AcroRd32.exe 2252 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.3e075aa4a8346db7543b692c37d9c640_JC.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2252
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a3dfad88050bade2c113ab07f38d86dc
SHA194b0b547db247f780dd9fc54791c26dd3cb51e1b
SHA2563df94a8c5da409de80f05e671fd071ef5bffe777f896aa749fa59086a359347a
SHA5124084f8ab43db3d7796a46c0106d620fe9631df7ab3a121efcd2551c591a5e15210e6d2fa4a930d894467bb727e306b3c8cd6bdcbc522d103ee722f1fdd1646d3