03e8b4da5db8eea31167425934148d39d72559e84105db9efe524c5c2bd2605c | Triage

Analysis

max time kernel
150s
max time network
122s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13/10/2023, 20:34

Sharing

Report Analysis Logs

General

Target

NEAS.ac204366b0cebb78a85a1fedac755be0.pdf
Size

521KB
MD5

ac204366b0cebb78a85a1fedac755be0
SHA1

271fcc7a97d068e1eb14b2708be0a185d7fcd476
SHA256

03e8b4da5db8eea31167425934148d39d72559e84105db9efe524c5c2bd2605c
SHA512

b56d1332cbb64085a3def639f7c7737521efbe96527c7be3083bddc724b8e9e032200c10dad1df27f5b7ec97c834f6a315ad6d6e490e18f69b259d88605290b7
SSDEEP

12288:t88UZa4bukzzQoCoSBsctOp1ULoZLuUQM8K:twzMoCdB3QkK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2020	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2020	AcroRd32.exe
2020	AcroRd32.exe
2020	AcroRd32.exe
2020	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.ac204366b0cebb78a85a1fedac755be0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
34f1eb564a0f8609297b9bf37f39a0a1

SHA1
437922c9c468d817fc4090d416ee7ad079d227d0

SHA256
cfe5185a95a9478652bcb8bb37a7b89037a762f413ad57ae554e8061adcce00b

SHA512
6058bdad4fe543df230f22c413011da94e00b6d4be123f0dc3e1587f0f73af16f381446b9395018379473fa8c9d551dc83cbf34a807fe4d4caab76f5418ca62b

Download Submit