Analysis

  • max time kernel
    150s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    22/10/2023, 18:02

General

  • Target

    NEAS.faf47a1866821ccb956a4aab4fb2fb40.pdf

  • Size

    47KB

  • MD5

    faf47a1866821ccb956a4aab4fb2fb40

  • SHA1

    d645a2c3186213e90d86f8646e4fe2159ce80665

  • SHA256

    8f8cd91dcdc3c9fde057adaeb05520c632dff3a4c01156aec98854b2209b3ba9

  • SHA512

    8f3a5f5dc4f4dbba9a6e7735d237d3aa0460e0937520c799046bafed962c2fb4b6e88f623780e118bed6b69045b6a20956c911aaf15446243a106dbde84a42d5

  • SSDEEP

    768:XhiaY2QaFi+39KyvoiEfohyfiloAookENj531TyGrhd+Ght75eCZYpaIO399:XhQB8KCQf6dloC3R5yG1LhtkCipaIOt9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.faf47a1866821ccb956a4aab4fb2fb40.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1956

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0ad61f67b164310e7305ccc4c075359d

          SHA1

          027d6436020d6aecaaa4bd8db8fa7168bcc897f4

          SHA256

          c90894f5c3d4362978952c50d4cc5bc77020b97459e2099967a97658599dac7b

          SHA512

          c597dc71d3e86bd78e8f4f372ecccb7f5838a0285e1af3df32b631ace163b590bcd62b12aa6ce708fc83522e058e5236e53c1f570eb3947496ae03f5cf751d4e