b73ad8d964f9370ab58f66514211cdfe66ca8001ddabe38b28a0a7ebc28a7af7 | Triage

Analysis

max time kernel
150s
max time network
122s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
15/10/2023, 10:56

Sharing

Report Analysis Logs

General

Target

NEAS.504a5f0e38186b1927c511be31aa58e0.pdf
Size

65KB
MD5

504a5f0e38186b1927c511be31aa58e0
SHA1

d8e8c2eff8da2d20f39e3a74df537a7e7b54e82b
SHA256

b73ad8d964f9370ab58f66514211cdfe66ca8001ddabe38b28a0a7ebc28a7af7
SHA512

6f3a967e780f1f9e127382857fd49082bb7e2a68571aa5e95ee4efaaa3a8eb1788304c760d18fc5b801da5c3ba214ed1ae40fee9e3753c90af28992280901e51
SSDEEP

1536:Ik1YZRz3zZUT3tN93wNRUtPW/Q0sYzk2HUS3:dYDe3GUGgYAOL

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2964	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2964	AcroRd32.exe
2964	AcroRd32.exe
2964	AcroRd32.exe
2964	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.504a5f0e38186b1927c511be31aa58e0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d21735cb8efb8c5ab7cbf6e853d719b4

SHA1
18dd715fa345b312ce627135194946b4c275deb3

SHA256
29a1db4278a46ddb5ab91beb40d48fbb0353dc869245f956b4505b860b3ed363

SHA512
2eaba39981272dd5c22e0ac48147fa3f3657632fb05e996a0ba458269d20e7150cafe8a802061b99f45e25b62528a5c1d56ed0afa423f5440d235a1783717f07

Download Submit