Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    22/10/2023, 18:01

General

  • Target

    NEAS.745ad32993454472fa2401fbb54d8030.pdf

  • Size

    51KB

  • MD5

    745ad32993454472fa2401fbb54d8030

  • SHA1

    5a18ef27876c2763a6fe338eb77247a5a84bd2f4

  • SHA256

    514340436fd856e47bb39da4e2de90429474cde67020a0101c8928a1c8d2a449

  • SHA512

    c6fc72cfeec1da83d062db13c294dba3320ca8480f219faaa4aa82b64362cf1a41e1e5cb0e2a98e79295ec03f7dd8f1d06fc3e9a88fc7f4054f0dd43cf73b857

  • SSDEEP

    768:hAs/aUe0eeSZ6A/P9SxKPK9TJ5SGUnCJogMDxvi8jVly97IYyRh+VnnU+GIZkAWo:7eeg6MSxZd+XhZGm0GkOlAARL2lKm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.745ad32993454472fa2401fbb54d8030.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2508

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3dea1a92d719132d651dbba9ceae4391

          SHA1

          6e864e3a13476ef7b4262a03d3aa3b4e145a36f3

          SHA256

          abaa716bfab00ce0d9d44d2dd86e1d5c6a939c5ec6cf03fcc11a641750082bc0

          SHA512

          fe2d85a414ba47b07678ddfb856067b6b1d66208f38e3b2ba7a51096abb01d885fc3468df4e0ed617fbafe0a774d99c73ab4ce7a891fe1827590c7f4682d0916