Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    31/10/2023, 08:59

General

  • Target

    NEAS.dd2cdf59f85119a4d7976c27cd3736f0.pdf

  • Size

    86KB

  • MD5

    dd2cdf59f85119a4d7976c27cd3736f0

  • SHA1

    a79c6953524e40134fb3c57c3bb1a5e34f3329a8

  • SHA256

    604f8a3c44b3c2ee35b4759a5e0003c297bb662d44801d2e25b4e835afd9396a

  • SHA512

    b77b0f78df472cc49a29e1b61a0b2c88f79f35c90d14b1322fe25649f18420dd03e90af8e9a8a6961c1e3cb25412005caa4579c1b85bafea4c0e8c9bf5a295ef

  • SSDEEP

    1536:tmCAbotT1LR4SlWdITay7uUkd4djwlesXuwbPWCpOViIWpXjCg44VLcLoldNdE:ZAbotxLR4K4way6UWi2uwb4Vi1jvLka8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.dd2cdf59f85119a4d7976c27cd3736f0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2996

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          09a7123d52211a9b5a75f42ccdb8ac75

          SHA1

          448e88929bf46d1bbfe376e70e431bbcae065195

          SHA256

          5fa53f4f64172e0e444e12b507a5f8d5343b98cbb4af20dde96f6a0e60754714

          SHA512

          b4cd2f1c8d4cbe9bc3e61cf644944367839bdea52a6daddc1782e442a4340d8f426dce5f4de36752723856fb2c4643eb61970ce37d67b377ad853377fe950b3f