Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    16/10/2023, 18:20

General

  • Target

    NEAS.4fdfc9b308a92974cd3cc212ad358af0.pdf

  • Size

    47KB

  • MD5

    4fdfc9b308a92974cd3cc212ad358af0

  • SHA1

    f94006336bf9d491c0b43f40bf1681ed2af61334

  • SHA256

    b43406d8b2ea39bd639739112589c16db9d8c3c5d05bfe63f20ca931850f21d8

  • SHA512

    a18b8e4123f0a9f43fbeb6ce55cc45bb88b9b4a7d10361d7c12e718616d1c5e0bb4fcc55c4fbe8e75caa275a07cecb1b3fe2136ea36832449e7e8f0f97071a1e

  • SSDEEP

    768:a5As/p/sIQJUb6raDH8NjrroCva8gxDjvm8wVEyN7LZYrRi+unvUYGRyCjw35p6M:a5QJUGOY+Wr35pCH2gzYpfpcRPSQ7Ae8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.4fdfc9b308a92974cd3cc212ad358af0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2072

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9b3a6304e34ad42aff57edb77720caf1

          SHA1

          b13d51e7fd519ea98102654431f4d7f25e28767d

          SHA256

          85964597394565b72773992ad7cd778e6ba38f91cef351c6099d179ad3632878

          SHA512

          f7b91a2a41fa99bb9e3f1ceef5df1ac62f5da8b94f6f7d46b189fe684dce9f870708a5e671e1ec5d872334e7e576c0253f6ea96c4a5cf5a0ae7d44d92997e3d3