f62d7cada81051e82d6703bfca28d73de6f2f4a85ecd4ce0a8a54787bef859a1 | Triage

Analysis

max time kernel
150s
max time network
121s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
22/10/2023, 17:58

Sharing

Report Analysis Logs

General

Target

NEAS.f848e9ffacd162af5054180f4b3fc640_JC.pdf
Size

110KB
MD5

f848e9ffacd162af5054180f4b3fc640
SHA1

b8d155d730d721125f96b2d9f2ca627d631b2a79
SHA256

f62d7cada81051e82d6703bfca28d73de6f2f4a85ecd4ce0a8a54787bef859a1
SHA512

08f0dd71c765e83beed8813fbb762de156193c141855b86bc5e24855c4ad492c55c097f5788e4a2f5d6924d0437e67e573ed962ed903f386e3809e3bc16ad275
SSDEEP

3072:k2XiEQKOj6nfrizTNIIEC/gjs/EKLudr9o:kbGnsN4jshSdZo

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1196	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1196	AcroRd32.exe
1196	AcroRd32.exe
1196	AcroRd32.exe
1196	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.f848e9ffacd162af5054180f4b3fc640_JC.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
381a3e15f6dd544cf6edc142b5180a8e

SHA1
f64943faadc244df6ef5efd5db5b751ea026e0ea

SHA256
3559909a52d8bdc6b8362ef2ed1df96b5c828db013997d8bbf551c7123389a83

SHA512
3f9da1e3808fea521a4725e7696470ffa71626d4b2cdaf9ea40a19af326e60fe5cbdf6949a2cd6a6e29326a4e2caba29577c507cf88a3aa5df956a8eb8dbf990

Download Submit