c8dd3c1b549270187d34f39856cf40717e41fa8ea0623d9242304c9e623e8646 | Triage

Analysis

max time kernel
249s
max time network
146s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
14-10-2023 12:13

Sharing

Report Analysis Logs

General

Target

NEAS.0de8b5032672402ee63f7be459cbe550_JC.pdf
Size

262KB
MD5

0de8b5032672402ee63f7be459cbe550
SHA1

1db020ef6b41377d3594d4a14641e0f0aa290284
SHA256

c8dd3c1b549270187d34f39856cf40717e41fa8ea0623d9242304c9e623e8646
SHA512

fef4dc258395560af428f48640107549a38d23301e2fa312d6197bfd133a4a33cea2b2ee880fc3d97dc6779e7542bd3692165ff085744998863e606c892e81aa
SSDEEP

6144:7IZhM8hLcpCZ/TarrC7IoaDwAcxJz7QHBf:EzhL6CZ7skaDRueHBf

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2648	AcroRd32.exe
2648	AcroRd32.exe
2648	AcroRd32.exe
2648	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.0de8b5032672402ee63f7be459cbe550_JC.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a60fe1dcfcd37b7f4cca357520c4cf22

SHA1
96a2187df9539fd7893c18a383a970092d89afc7

SHA256
8ca6d26af1bb7108ec335fc49e3b5e68ee6f3a0438f54f1776f8dfb3580773d0

SHA512
c8f04e6097c091e55c5bba4a272c5e01c38b66cbd129ddce56f2c100ff1916468bae9d0159012e121437d21976c847263c8d87ca66568ba1a955bad128622d8b

Download Submit