Analysis

  • max time kernel
    190s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    16/10/2023, 18:21

General

  • Target

    NEAS.565e9b3cff7de5098d79167ad5079b00.pdf

  • Size

    1.0MB

  • MD5

    565e9b3cff7de5098d79167ad5079b00

  • SHA1

    1dda97f40ccc36f5d8e5ae625e16ec3e57ada896

  • SHA256

    dd5b3a3161bd0d239524c10528fa67cbba64f13e02720a7fe1c6152ab6070a97

  • SHA512

    677cab6c83730e7d619706d998898d3ca9f9066ffde806a4fab15c8201b44372723eaec0786c2e910c0cf1e9ec2632042ed1b6284304c61c0959b87b10101642

  • SSDEEP

    24576:lN9K02ZIBGm93Ryrwk/XwWVEAJwXuGd4JUxVVwzoT:lff2Z5m93RyrwkejdpxVVwzU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.565e9b3cff7de5098d79167ad5079b00.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2724

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9d1df0b3d66fe807f8da20d2ba24bc42

          SHA1

          7833e7ed20b294fb5c92a653ebff322359b8a3b3

          SHA256

          4a2a12cdbd2688037f6e1238e4d87e1bc010320a41c84f09a303c7e7b24f709c

          SHA512

          bc8804dde0dd8206ac43ec652978c27fc300ccda1de67aaa84fe1d35323a86ac1e7e1741e0f832a3ebb804fe37093e6ed655572225da3a70fa303ecc7569b47a