Analysis

  • max time kernel
    156s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    03/11/2023, 14:13

General

  • Target

    NEAS.140ad6daa466e65e8e693353a421a620_JC.pdf

  • Size

    49KB

  • MD5

    140ad6daa466e65e8e693353a421a620

  • SHA1

    1ab10273ab3114ecee32135ba3c9746cbaf9ccf1

  • SHA256

    3e4f452792e91ec4b3d249053c647a4b86d0394cc46e90349d4013068b3c12db

  • SHA512

    0fc8d440a62ff12ba79e32fbc7ab41d9bc9b5017b94e51ed1185493d534d5dbb32296786d8e371b93f3f21cfa3fa9ae246fce911bad4c2b75179ef36cdb7f579

  • SSDEEP

    768:Vzcz1azrtsULZRR5aj/CdZLCJuft9y6rl3wJ4IIdeO4XSjjFYLpRr8Fy6tuOmP8Z:DvOuFaJ+F2SFYLpgp/RmNC2tQS+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.140ad6daa466e65e8e693353a421a620_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2880

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3d6d3f90011372999632b57d17c1ab5e

          SHA1

          9634ae37d2fdb9d86a5a4b3c5f88c64cf10bdbaa

          SHA256

          2dbf975c7f4e8a1d98d34a7e0670bcb8111748f0362e6a4822e4665eecba8cf6

          SHA512

          037e09af74052d818ef8cb5edd66f098703e51dbc32fc10da44e905f9840012df4d0a7026bd9c32a0e001cc6bf2bcc82875c4ccafc7309167ff2e8dc545c11a2