Analysis

  • max time kernel
    211s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2023, 10:57

General

  • Target

    NEAS.7f9bca37cbfc8272c6414019758c8a50.pdf

  • Size

    38KB

  • MD5

    7f9bca37cbfc8272c6414019758c8a50

  • SHA1

    aa823c7a344d64ab3818e393f41ac65d7099852d

  • SHA256

    02b637eb1ee51617bec798d76f575f367fec937b267114d4cc1846f7cf4d27de

  • SHA512

    7aae0896feb6380253e52ee359fd4843003f621e703c8a21f06134b7c6237f98a9d8adcc128646cb43f176f750567a853125e212b0ec3d2af16af745160bee5d

  • SSDEEP

    768:vWABC1xilnW6mWojwHYMKHFeycyNRQaqy3inJXSEdndPslymzWZQ:ukaYlW6mrSKIy3QJy3CJJdnhMymzWZQ

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.7f9bca37cbfc8272c6414019758c8a50.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    51279fbbf0992646515c88c69be61813

    SHA1

    a060d9cf83ded7b2dfe128147138ff5cc1fccc5f

    SHA256

    b380f4d0864c8741b80ba5713cdbf2457fd209e6606f5dbd6b05886fc1ccc46f

    SHA512

    53a3cbf00595a6e6d0dd7c4520b485da021d56f6430cb005da0d30ae341c3d9c4db4e39c6c5584eab109cb84586c2dd0cbb6f929cc8495bc40c54eeaae6c21c2