Analysis
-
max time kernel
150s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
04-11-2023 10:39
Behavioral task
behavioral1
Sample
NEAS.eb66cafe0311b4dc7a5f0183bca20730_JC.pdf
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.eb66cafe0311b4dc7a5f0183bca20730_JC.pdf
Resource
win10v2004-20231020-en
General
-
Target
NEAS.eb66cafe0311b4dc7a5f0183bca20730_JC.pdf
-
Size
107KB
-
MD5
eb66cafe0311b4dc7a5f0183bca20730
-
SHA1
a0dbf342440634af0406402ffc38bedbebfc8054
-
SHA256
87c98d891f76525007f07340096656b62d46985ae5d69ed38b8b514fff80a9bc
-
SHA512
6920eab8356b742050737ea388e73deee727d9af75287d34bc530bc9de24f89c4c1a76a33330cef9d612ad01c424308dde85df9ed7a941cab45224e55057b66c
-
SSDEEP
3072:5+xo+Zy2OtfMrf2RP4DIXglW5/bzJEdEtemdSb:sTy5fMj2546gAwOemdSb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2196 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2196 AcroRd32.exe 2196 AcroRd32.exe 2196 AcroRd32.exe 2196 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.eb66cafe0311b4dc7a5f0183bca20730_JC.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2196
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD576a258b68313a2d446014b3dd4d53c45
SHA1222fc35b884cb432ec8515c0d80a0eecaec3e659
SHA256ea14763893a167aeb1b8e8b166f3dfd7946d2146aec373e1c26a03bb3e23375c
SHA512a74784dcedc697d8cc6d1deae5db976f7039f9322808467145a19acd59f2ed5d14727df278c3ad8e739f5e333916ea1542f0846943e82c0333a1b49878fe88da