Analysis
-
max time kernel
150s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
31/10/2023, 08:59
Behavioral task
behavioral1
Sample
NEAS.dd2cdf59f85119a4d7976c27cd3736f0.pdf
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.dd2cdf59f85119a4d7976c27cd3736f0.pdf
Resource
win10v2004-20231020-en
General
-
Target
NEAS.dd2cdf59f85119a4d7976c27cd3736f0.pdf
-
Size
86KB
-
MD5
dd2cdf59f85119a4d7976c27cd3736f0
-
SHA1
a79c6953524e40134fb3c57c3bb1a5e34f3329a8
-
SHA256
604f8a3c44b3c2ee35b4759a5e0003c297bb662d44801d2e25b4e835afd9396a
-
SHA512
b77b0f78df472cc49a29e1b61a0b2c88f79f35c90d14b1322fe25649f18420dd03e90af8e9a8a6961c1e3cb25412005caa4579c1b85bafea4c0e8c9bf5a295ef
-
SSDEEP
1536:tmCAbotT1LR4SlWdITay7uUkd4djwlesXuwbPWCpOViIWpXjCg44VLcLoldNdE:ZAbotxLR4K4way6UWi2uwb4Vi1jvLka8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2996 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2996 AcroRd32.exe 2996 AcroRd32.exe 2996 AcroRd32.exe 2996 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD509a7123d52211a9b5a75f42ccdb8ac75
SHA1448e88929bf46d1bbfe376e70e431bbcae065195
SHA2565fa53f4f64172e0e444e12b507a5f8d5343b98cbb4af20dde96f6a0e60754714
SHA512b4cd2f1c8d4cbe9bc3e61cf644944367839bdea52a6daddc1782e442a4340d8f426dce5f4de36752723856fb2c4643eb61970ce37d67b377ad853377fe950b3f