Analysis

  • max time kernel
    150s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    23/10/2023, 20:00

General

  • Target

    NEAS.3e075aa4a8346db7543b692c37d9c640_JC.pdf

  • Size

    70KB

  • MD5

    3e075aa4a8346db7543b692c37d9c640

  • SHA1

    8c05a7871defb8db52601b2a935fe3ea18ca967e

  • SHA256

    6b9116bc699a2371bf9020e919f543197b2afc66f2cc9c2f7f06201b0be70626

  • SHA512

    cc3d0cdcc8c08a4225fdf697b7a610eb12cea7ccbbb4401503011276c695e6f2eac75fb5c359866456a3f27c33a18977aa2c426f5f69a67c9c664bd301496286

  • SSDEEP

    1536:VdqGVLo8u4ROtfLm9TnOXCgDF2222W45RrWZnx:VdqGVkAAtyOyus45Rrqnx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.3e075aa4a8346db7543b692c37d9c640_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2252

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a3dfad88050bade2c113ab07f38d86dc

          SHA1

          94b0b547db247f780dd9fc54791c26dd3cb51e1b

          SHA256

          3df94a8c5da409de80f05e671fd071ef5bffe777f896aa749fa59086a359347a

          SHA512

          4084f8ab43db3d7796a46c0106d620fe9631df7ab3a121efcd2551c591a5e15210e6d2fa4a930d894467bb727e306b3c8cd6bdcbc522d103ee722f1fdd1646d3