Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2023, 10:58

General

  • Target

    NEAS.d9de6fed50ea47b1438b3c2c1c1b62e0.pdf

  • Size

    390KB

  • MD5

    d9de6fed50ea47b1438b3c2c1c1b62e0

  • SHA1

    823f49551ee9bcbaeeaef70e4f9b07743061a7c9

  • SHA256

    f29d2be5f72fb50dfb3d4e1f0d8f48ece4ce7445a9cecc514087674450a4cbde

  • SHA512

    a6bba6729861b4f15aaf52f1ea6a1012f4138cd4c94f83a641a7272fc9213cb51b26600138f1bed5ee0452ae2f98af956be14678e19e7b803c78a23ab115dbeb

  • SSDEEP

    6144:4WV6wz7Ir09Yw3hlK3sBdxGhdLf+S+mOIZOajrYRgu+kI1F5BO:4WEE7Irj3sLxEzOITqn1If54

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.d9de6fed50ea47b1438b3c2c1c1b62e0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1712

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          fb604e25a33c02c4ffae52110a96601a

          SHA1

          810e9dbb66d7b1bedb6be03e9d27480d8caa5467

          SHA256

          f7bb63fb30b20e3b32911d173b44da6d2a90aaa2377e7e6ecb3b3f5499960d94

          SHA512

          34af858c3984aa45101879e5ae42ae2634000cf463768d2019a072aea519ba0244d4e6b51154aae748a45978d8784ab081a690c05bb3b3c1a82b161f6e669dd5