Analysis

  • max time kernel
    151s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    22/10/2023, 18:02

General

  • Target

    NEAS.d534a6e65fbb954e6183779c1f1b20e0.pdf

  • Size

    352KB

  • MD5

    d534a6e65fbb954e6183779c1f1b20e0

  • SHA1

    98708709829158ae40e016e4dedde75682c9ba5d

  • SHA256

    0f357dffda8b0d86b0cd6243884a728425e28e7ad1df2c74e8bb5ca7c40235e2

  • SHA512

    bd046bfca801d3d8f07b6567f7bc4df01ac4da3f152919dda71ad47c78fe8bfc66e1520c6b15210d2e1c9097214812bbf76b0f13631daf67b8fbb7ef4e50caf4

  • SSDEEP

    6144:SuMgJksgumGWY/VTqs6YBZUStgZWvnGmBxkHo2SRaYSDATqncXqsPB1A1:42RuVCOrYblgWnGeN21DAThXqsTA1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.d534a6e65fbb954e6183779c1f1b20e0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1480

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c5dfbcaeff16208f98fc792fa5878307

          SHA1

          841a0c51f47dda107bb49d4f3a2311116bb93e4e

          SHA256

          0b85fdfec6756e2c17044ee78dec630852a07963b8cb3d2f99f1b3324ace10a0

          SHA512

          b417cd6b38ac12976b468629a67bbd110a4f714de6977bed91fa3b19549e05e97d0330cb7c1789866b8e6a2f5f681f4e97efb6a4c54115766e32e2be914ca36b