8098081ea8dbc065f954c87432f620d5f4c8399180a93fbc7607109cc5ecb445 | Triage

Analysis

max time kernel
193s
max time network
137s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
02/11/2023, 07:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

NEAS.51a624abc1df97ea3a995a5361d7c470.pdf
Size

52KB
MD5

51a624abc1df97ea3a995a5361d7c470
SHA1

9a0fe7daf055ee9f8ab6a0818bd06f063a568ea8
SHA256

8098081ea8dbc065f954c87432f620d5f4c8399180a93fbc7607109cc5ecb445
SHA512

3ea08d8c022d4a60405c47da9b081772612c4c526e152cb04df2a371774dae37d3b42361022edf8dd8773ade90a5a6b9ae2629a4592570e148bdf9bc8101fa37
SSDEEP

1536:yUhtnAZmuuFaJNb2SFYLpg2TJtP9SjIm2L1:yUDAZmeHb2SFYLp7l+Im2p

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2760	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2760	AcroRd32.exe
2760	AcroRd32.exe
2760	AcroRd32.exe
2760	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.51a624abc1df97ea3a995a5361d7c470.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c4505a1c16ce6bea62783b3c8337d309

SHA1
f43c21774a470f19e67d53ed225690cdc7c3c05e

SHA256
eb0a051daa093b32055746c368c98f7a34d17198a1afda5a2a111beff7f60961

SHA512
d9c66159ba5bde6b42f8f82e7c17a2fee4308b29d9323c2f86dda71b1b3e14fc40b34124399a3471898197f895a47326d8f17db7bd701469f578946cde3fe4cf

Download Submit