Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    16/10/2023, 18:25

General

  • Target

    NEAS.7970622fbfc04fde61e024ec5689dbe0.pdf

  • Size

    90KB

  • MD5

    7970622fbfc04fde61e024ec5689dbe0

  • SHA1

    f4d81e355acfa8b13fc5c5ddd430790004b4e22f

  • SHA256

    d258acda1b1f5da35a52c9463cd066e6472abdd5f6ad24b1ee2c217fbe7f0d6d

  • SHA512

    4bc6e73456e3c37511dbfe22bdbd4f2f822749a48997c4d92e9d31ded050de34294d79c89840267685aa844615ca31a6ea4bb0c9938c8f05fc365a382eef9efd

  • SSDEEP

    1536:VWFhly+9O1GbF8Wg/qDiO6A9rHXnaTX/Bpfesfl5aJYWKcKmf1W8pO73WbV7CFtU:kr9O16FDvifA9LaTX/vvtZcXf07gV7CM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.7970622fbfc04fde61e024ec5689dbe0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          751b385c71053cea5cbd64ee1c5cfa66

          SHA1

          a1f7db6b2fbd6b31f819ed5fed1edef0c9ca477e

          SHA256

          9d3809d82fe922cd99929b5c94b5fb420cc3d2b5e11bd5050249953489d685b4

          SHA512

          c03d308d7253632c11d2e51fcf2468f6101e09d790717052c659d6e6ea26202fe7c9ded23cd2e105539b2a027ad0c557ec5ad1a4a0efca0125982e8865256e34