Analysis

  • max time kernel
    176s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    16/10/2023, 18:21

General

  • Target

    NEAS.52f7a8fa41a707e361af74dc428aa3c0.pdf

  • Size

    49KB

  • MD5

    52f7a8fa41a707e361af74dc428aa3c0

  • SHA1

    6e3afbdff1adea64cf001083709efa17361387c9

  • SHA256

    135bbfafc239fb932541a24c9ad2bc97f86d1c435dcb520ce207ac24fc7ca6c4

  • SHA512

    a38897d25ce7ec437a868b31025a88c001340d421bd6d8a38aac560a2b885d6ee5c7d4ca7cf37437d1cd1e82f7163193799108a3ba0866e437b841f6d0c63d64

  • SSDEEP

    768:u8VJw/lqiWzdeA5u7E/nysLrlDmCF60W/Sxd/9YhrzVMIpXbXRzo+:u8Vglq9Y7Wt6CjW/Ed/SrJvrXq+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.52f7a8fa41a707e361af74dc428aa3c0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3036

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          be32b3d5e84a61880dcf3568ca1872bc

          SHA1

          36fc381f0ff07d393a37f868bad2acc5998c1844

          SHA256

          2f30d2d6195c6e9a3ed1197cd37b8fd736f6f3e0b782c86bed563c42f5ab2eeb

          SHA512

          a608ea3fcf212646c0118adad00c56bf48905263e306529ada2de1944d9b572194f5077bf6fc867e92808bb5b000684f0f85b0f2945d414366f188025b912f31