Analysis
-
max time kernel
150s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
31/10/2023, 08:56
Behavioral task
behavioral1
Sample
NEAS.95a4151306b505c2a6c458f603aa7cd0.pdf
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.95a4151306b505c2a6c458f603aa7cd0.pdf
Resource
win10v2004-20231023-en
General
-
Target
NEAS.95a4151306b505c2a6c458f603aa7cd0.pdf
-
Size
148KB
-
MD5
95a4151306b505c2a6c458f603aa7cd0
-
SHA1
e1024546ca5eb8c550777474779037469a07c8b8
-
SHA256
d781b31a3bdb566875cc1b4a1e0c753d81e7f6be7f00015fc854f0f51a581d79
-
SHA512
d988a924b64fe4f3e8144ae985a5544af57c7410a5e5ee79c6546de189a64c162ebefb88858946bd7a2dda42da154953f806fe36574312b3ea4afbab53727ffc
-
SSDEEP
3072:OwPpi56CLq0bahjnvBmH7mJjZmfRkQ+ouNeEANJUvrdLLifg:9XsKjnvB+mif+nouaw
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1204 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1204 AcroRd32.exe 1204 AcroRd32.exe 1204 AcroRd32.exe 1204 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57e0170132980bedd4dda81c4ea4fa9b5
SHA12c33968eea43489d3b7fdda674bbed259049fa96
SHA256fa96786ace8c9006453f57f0abe9ae0238739e60de92d7779cdc71fef515f6d2
SHA512536a420ab0459435aa119bf5cb226f698e4dcd2a95410751a8793ef354e60188ba25f8d6b90c49b37e3ce7a2e5aaf9618f1644b619821a8ffcdf8e84460ab5c9