Analysis

  • max time kernel
    152s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2023, 10:57

General

  • Target

    NEAS.8c6d975a157e7d2221c0708dbbfb6cd0.pdf

  • Size

    355KB

  • MD5

    8c6d975a157e7d2221c0708dbbfb6cd0

  • SHA1

    f73d3db35b2021f93c6f65f9690da2ed442479a1

  • SHA256

    70e755e46ab2ba5537eae87a942f47479d41257553e16c3a89d8b510459b2ddb

  • SHA512

    7cedd1d4fc3fd747f71a58fe43223c695ff7f262cff9bdfde027a0bc9d2df6006cb54cf179cc61e381bdecd804918c065e86185afda173b1f8c91b8e81c4d4c0

  • SSDEEP

    6144:BSPLJCdGnvSvrfjtrBbLybg/IG8cu3+DN0Kkl/VPQ6qFtMlSN4z:BSPLJ3vaprxYS8FHJVPQ6SKz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.8c6d975a157e7d2221c0708dbbfb6cd0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2460

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5b866deffaac60268e6757fbec9ae92d

          SHA1

          8bbbc439c3cb12c09df9464b7f18f38da07ddd0f

          SHA256

          ec6658fbd229d8009e620e5bf90dc4a47285a2b6fcde63e266fc249b9a086f38

          SHA512

          1f452a2e1f2c4a6017fb43fcc87430ce0ce3351cc72138170255455cf3320bcb7b2afa396e65d4f2c7b127ef616f6acde71107f83fc24ebc1ede97c4d06427f5