Analysis
-
max time kernel
156s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
03/11/2023, 14:13
Behavioral task
behavioral1
Sample
NEAS.140ad6daa466e65e8e693353a421a620_JC.pdf
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.140ad6daa466e65e8e693353a421a620_JC.pdf
Resource
win10v2004-20231023-en
General
-
Target
NEAS.140ad6daa466e65e8e693353a421a620_JC.pdf
-
Size
49KB
-
MD5
140ad6daa466e65e8e693353a421a620
-
SHA1
1ab10273ab3114ecee32135ba3c9746cbaf9ccf1
-
SHA256
3e4f452792e91ec4b3d249053c647a4b86d0394cc46e90349d4013068b3c12db
-
SHA512
0fc8d440a62ff12ba79e32fbc7ab41d9bc9b5017b94e51ed1185493d534d5dbb32296786d8e371b93f3f21cfa3fa9ae246fce911bad4c2b75179ef36cdb7f579
-
SSDEEP
768:Vzcz1azrtsULZRR5aj/CdZLCJuft9y6rl3wJ4IIdeO4XSjjFYLpRr8Fy6tuOmP8Z:DvOuFaJ+F2SFYLpgp/RmNC2tQS+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2880 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2880 AcroRd32.exe 2880 AcroRd32.exe 2880 AcroRd32.exe 2880 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.140ad6daa466e65e8e693353a421a620_JC.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2880
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53d6d3f90011372999632b57d17c1ab5e
SHA19634ae37d2fdb9d86a5a4b3c5f88c64cf10bdbaa
SHA2562dbf975c7f4e8a1d98d34a7e0670bcb8111748f0362e6a4822e4665eecba8cf6
SHA512037e09af74052d818ef8cb5edd66f098703e51dbc32fc10da44e905f9840012df4d0a7026bd9c32a0e001cc6bf2bcc82875c4ccafc7309167ff2e8dc545c11a2