439d56dbc5ec5e5fd75a16dc659639ca81aca7b9c81d50bca65f3a0cceb1dbda | Triage

Analysis

max time kernel
187s
max time network
121s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
16/10/2023, 18:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

NEAS.9f7b9c89663615135c2b3afbff6f7a40.pdf
Size

233KB
MD5

9f7b9c89663615135c2b3afbff6f7a40
SHA1

c67bdf89fc779a1925b0693cfcb164ae4a5a9180
SHA256

439d56dbc5ec5e5fd75a16dc659639ca81aca7b9c81d50bca65f3a0cceb1dbda
SHA512

d6ee4865d7c20c7a682efac5b7126f6ea53d00e201df2140e232046f06df66ba2dff261ada2307b984ae6684ec7e7307e5bae00f4b16d3da05c17cd46ac3b480
SSDEEP

6144:zbgVJSxujuVwoKJEFSjlpis90GpktYxl+:zkzMuj0Kdms9xiz

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2552	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2552	AcroRd32.exe
2552	AcroRd32.exe
2552	AcroRd32.exe
2552	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.9f7b9c89663615135c2b3afbff6f7a40.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9549818e49fa4216cdec178680b14479

SHA1
cc7d2264c1f900fcc021edb1f85237462b418558

SHA256
4f294b7215fd1dd8927a1c60b5e44c13f7126fd68de2588553e794d8baad0428

SHA512
ca8f91c4a4586826e03848d62c80edcac051fa1d8eb576eaa2e12ea0311e64bca22d79bfe4d014bd32bc4d43e60b3b962bbe8d6a7759034401e519ea5ba5cc81

Download Submit