297d4c46f2e8c28293cb2be2f8160655c81f2394dfabe452ca473674cb0efd21 | Triage

Analysis

max time kernel
150s
max time network
126s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
31/10/2023, 08:54

Sharing

Report Analysis Logs

General

Target

NEAS.60d0807ee392a0313c8ec27eff3e3a90.pdf
Size

34KB
MD5

60d0807ee392a0313c8ec27eff3e3a90
SHA1

280696a9c3f50aeca0a776b48aca7d6e63790edf
SHA256

297d4c46f2e8c28293cb2be2f8160655c81f2394dfabe452ca473674cb0efd21
SHA512

d640d6b384a87710bd4f613fa929e00f01be2023065a65dfc12a2082f1b9ed5c0315fd6db8549fa27b0c7524ff6ee849b6cbb84d7ba819abe97778f417d4cb6f
SSDEEP

768:MziZYCPUscN0vEFjowPu4fYEmStlhVh+P:MuZYCPWNTxFPua2St+P

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2016	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2016	AcroRd32.exe
2016	AcroRd32.exe
2016	AcroRd32.exe
2016	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.60d0807ee392a0313c8ec27eff3e3a90.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b1b749a952e8f92aa168f58fb9ef7e91

SHA1
104e0a07dafd7cfe91d1896fbefc429d31737532

SHA256
130e04ef68e28f5642500dee49d66c571b10c8e23c19190e4a66764c307416ed

SHA512
237ccb7ea061a802aa25b13439b13dd0c22a02818ee902fec126e1d598a5e6cb1641004bdd372d94c4ea44c637be8332b9aabeb92bc71df4e253820e84970ad9

Download Submit