Analysis

  • max time kernel
    167s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2023, 10:56

General

  • Target

    NEAS.4e7091ee942c4dd5d1c56b6caac0a930.pdf

  • Size

    57KB

  • MD5

    4e7091ee942c4dd5d1c56b6caac0a930

  • SHA1

    7b3dfb5500d984852b4562fc921b23dd6d951ba1

  • SHA256

    868223254fa633dce3ae896c7e958927eb79ac9a11b55b11491713560b804d98

  • SHA512

    583abf7a6e56dbac31f2f66201e73d888aec70adb5a2b05fe022963a7cbce20695f1e4ea30f32aed5570cb615225e5374c92ae94e19f181878268c619ecfe86c

  • SSDEEP

    1536:s93bjN6aYdiBLuFaJN92SFYLpgBn+IQpMwi7/Axb1HD:W3fNJGInv92SFYLp2BQpDE/0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.4e7091ee942c4dd5d1c56b6caac0a930.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2788

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          13cab5b71f1cb729816dc323b1bf8b01

          SHA1

          18d4e69e7f6f10d3b5f9dd25c92ad5cc9c00be31

          SHA256

          32e3449d9dc6ef131bececc57994c39f271c6632b9499d21c42024ca05c3ad62

          SHA512

          530e3c612d56c6cd1a3b6e5ae0ce72401d7b1773cc8607f274cbaad44f3ba78fd44040bc701d4659e6abd3f97927f031d4219897cc138139bb207124a71fa593