d996f97af78688556bcc1b3fbd79a6ce486ee229c41edd1359242c129c74f100 | Triage

Analysis

max time kernel
153s
max time network
130s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
31/10/2023, 08:55

Sharing

Report Analysis Logs

General

Target

NEAS.7f8c1b8ecb7ae21c5302564d757aae50.pdf
Size

63KB
MD5

7f8c1b8ecb7ae21c5302564d757aae50
SHA1

97fff7c486ae501f9bff38c90168e326114dcab3
SHA256

d996f97af78688556bcc1b3fbd79a6ce486ee229c41edd1359242c129c74f100
SHA512

be6e43e8fda1e866d2a834e3faf64fbdf3904bf813e21c63b12b4487be8c9e5e33bf3e0fd3d9793b1972ead3af5bed1a4890050bc1b4ebfca630d364959c2086
SSDEEP

1536:bJRtb69tdR5HvhfxsN9ipekQJ0PWSvPUt/tei:VHbg5JfxQgsl4+J

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2288	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2288	AcroRd32.exe
2288	AcroRd32.exe
2288	AcroRd32.exe
2288	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.7f8c1b8ecb7ae21c5302564d757aae50.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2b94f8916a52945d5c7d01ee2284ffc3

SHA1
0ee2609d1c87cfc8a6a41990518d135f89f2968d

SHA256
8962d9684cc759337169bb88109c3c3c3a087e8517e0f8a84e203d914c45747e

SHA512
5096f6adcf383e26f41cb1127c3ae4111695cc1f794ef9600696799f5e8df24efbd2250929c2db642187969dcae02faaa8bc4beba7dc64df4b3f75c37782432b

Download Submit