Analysis

  • max time kernel
    168s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2023, 10:56

General

  • Target

    NEAS.38a44820426d353472db0323284d0d40.pdf

  • Size

    325KB

  • MD5

    38a44820426d353472db0323284d0d40

  • SHA1

    26191d16486b8790dc2c97bb2ce34183d4acb2ca

  • SHA256

    2c7841f05b13e7d65ea918fb48d26211a954a8d09e0db52d98d14ec4e62a7515

  • SHA512

    4e29fc7ebb41b2518ec6c6b2b28c3f4296c9cc913b7baa16b58bee9233a49ee43bf545bceaedb9d0efddd9c3713ebbb157dc51c53c145b7597bef9a6aaf3837d

  • SSDEEP

    6144:foNOAl9P4vN3cmYBqS3cyWeRaHZfcj5oyBYQvPQQQQ6lkYb+JcyIjxr:wO/vN3XsqMWSY0loQvPQQQQUk++A

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.38a44820426d353472db0323284d0d40.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2412

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          562645e3801ad26f09a7c186803ef0df

          SHA1

          0f01ce9f03c73ecd4d1814785ed2e01daad78c05

          SHA256

          6ded9fbc98e8e3769a2c993ac112df548abf66203d155ece2846a16c8623a244

          SHA512

          8a05a25ec8c1bf2bf750644546968487ead1480eb9c4cd901bdca2babcab7f4ef75c78a960268f6018581821c753f149130a99d700bef279f2652373c36dcc7e