Analysis

  • max time kernel
    153s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231025-en
  • resource tags

    arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
  • submitted
    05/11/2023, 03:47

General

  • Target

    NEAS.d6bb5c2d235463132fba5f58c1e3d4b0_JC.pdf

  • Size

    316KB

  • MD5

    d6bb5c2d235463132fba5f58c1e3d4b0

  • SHA1

    7b62bdcd63fd350c7bfbdac1b54c9c4f69ea386e

  • SHA256

    5880bdd4874b452afab5b630e2c5c8494e84f1befc89478040930f1f92f2df5e

  • SHA512

    1f2620271e8d027c6340ca049ead8c73225863aa2f506a7d3fccce87083915de3bc61ed19c9e37aa4b2c35410dd904f173785eb9d7f6ed4749e5e1cf93e3197b

  • SSDEEP

    6144:PORXLmerwMXvQdB6DMZiw1+Ct2BKTGliG//KAelXrKsbZ:gXLmeX4dB6DMZZ+Ct2B2Glz//KVx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.d6bb5c2d235463132fba5f58c1e3d4b0_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3008

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3c14acc83fbfc639a3614ae9c988d352

          SHA1

          ceccaddfb27ed92e9e869eea791327e6164ff790

          SHA256

          11bc845db3d85ae20ce23c01e0779d8c84ac3ff1b09a8e920ed7c49fd5ab15f9

          SHA512

          e5c41129dd0194b430eb18147eb500aaaec1029229c6dbb5617c6052119ba1ec1ae5346a42771fef8ed56dfda31b1979ad7a2e7ae31d7a4389b167e61fa293ee