Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231025-en
  • resource tags

    arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
  • submitted
    03/11/2023, 01:51

General

  • Target

    NEAS.cba357d221659a5505d3f647931df950_JC.pdf

  • Size

    36KB

  • MD5

    cba357d221659a5505d3f647931df950

  • SHA1

    4e51b00c1ceec12b2496027f5a7c60acd19d4a63

  • SHA256

    06fc446f041ad0bd46a85fce0b2a6d3d5e49a25fb175e052e619d1bb9c9d7275

  • SHA512

    0672db57f7599da0061e2ce271b1a5a3fb94f70f4d85a0c105666839ff67b75afb2e5811a6348f862164fcca49fd9bb422c3b14bae27f59eb58575064701a497

  • SSDEEP

    768:UC8xhHq+DsuTrd2jF15JxYaHj+0PYGP9Dhlllt/otwdf3F:t+Trd2r5FDLZDhLdf1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.cba357d221659a5505d3f647931df950_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2252

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2365c32137dde6ac3729a87f6a8dc5d0

          SHA1

          fa4c93aa8ad183433627d8b8aaf8be94b8a23a2e

          SHA256

          25bbec5fa6368b275f0226a382be25721c0d4a8248ad3de7963d6a9a23dc6084

          SHA512

          d9481fd542eb95ce83e72ebb594ecf151fdb2a5b5d3e11c4f48f192820e10fff4041a3ab64f7c27f13b38b3b2b522728411d6e4ca689c4918b602c518dc5da24