efbcb1954c0ef2fe369b4ba1418b44203d914412f9b667a4777e1b7933344829 | Triage

Analysis

max time kernel
150s
max time network
127s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
22/10/2023, 18:01

Sharing

Report Analysis Logs

General

Target

NEAS.50ecc58c9add5adb8ff7417e05f78e70.pdf
Size

506KB
MD5

50ecc58c9add5adb8ff7417e05f78e70
SHA1

aa0dbb3420a97a50f8d9c08783180c305dd5f7a9
SHA256

efbcb1954c0ef2fe369b4ba1418b44203d914412f9b667a4777e1b7933344829
SHA512

53e9aa17d8e3c08d3afa15269f49a7bdacbce64e0ab66e32cda01947b01c6d00a111b2f54ae7e2d32a1c41bbb411dc8ad09ed845787f5c4d1f8eb0cad9036b30
SSDEEP

12288:WaZ1mmDI7ERuKuWZ94xGYTq3lamHl/j2j098J2:RZ+fWZYzMlak

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2448	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2448	AcroRd32.exe
2448	AcroRd32.exe
2448	AcroRd32.exe
2448	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.50ecc58c9add5adb8ff7417e05f78e70.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ca89d5e353509eb7f83df4d7ccc9b96c

SHA1
7f740394ac272bfe781cd04ccf886f0b9ce426c5

SHA256
a90dff2a5ba6a8662961fb00a8f53fe50d4f180ef4b6a943f6d94b72deafebb2

SHA512
4902a37ad4d0105023282338748caec023731bc9c4f9e495e31d59457f0e6ca6ffd35efc81e1e08e41b45d74e99981745381988a8545926bda21069c2b065c16

Download Submit