Analysis

  • max time kernel
    150s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    04-11-2023 10:39

General

  • Target

    NEAS.eb66cafe0311b4dc7a5f0183bca20730_JC.pdf

  • Size

    107KB

  • MD5

    eb66cafe0311b4dc7a5f0183bca20730

  • SHA1

    a0dbf342440634af0406402ffc38bedbebfc8054

  • SHA256

    87c98d891f76525007f07340096656b62d46985ae5d69ed38b8b514fff80a9bc

  • SHA512

    6920eab8356b742050737ea388e73deee727d9af75287d34bc530bc9de24f89c4c1a76a33330cef9d612ad01c424308dde85df9ed7a941cab45224e55057b66c

  • SSDEEP

    3072:5+xo+Zy2OtfMrf2RP4DIXglW5/bzJEdEtemdSb:sTy5fMj2546gAwOemdSb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.eb66cafe0311b4dc7a5f0183bca20730_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    76a258b68313a2d446014b3dd4d53c45

    SHA1

    222fc35b884cb432ec8515c0d80a0eecaec3e659

    SHA256

    ea14763893a167aeb1b8e8b166f3dfd7946d2146aec373e1c26a03bb3e23375c

    SHA512

    a74784dcedc697d8cc6d1deae5db976f7039f9322808467145a19acd59f2ed5d14727df278c3ad8e739f5e333916ea1542f0846943e82c0333a1b49878fe88da