Analysis

  • max time kernel
    150s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    04/11/2023, 08:52

General

  • Target

    NEAS.d7c1a164183b9c059253b896c7ca1e30.pdf

  • Size

    352KB

  • MD5

    d7c1a164183b9c059253b896c7ca1e30

  • SHA1

    d62556d9acf5525f6f003cf8aa2e977c57d79b77

  • SHA256

    dc879892b8c18a14bbcd8a2d3e6c75e2caa5efbd67d2ac63ed1b42a5b067245f

  • SHA512

    1eb722fbc4c3ac9c6ac096b7c4ea2e944cd09937279278b2bba687e35890267a0c2a2f201eb7961407458598d72ee3181f7446f98dc459f7e481d13f68d2c9b2

  • SSDEEP

    6144:usEOHb85F0GdEqYhLZSlDZFoi/CgoXaOC252S0vH7JqYasf92XkIzHxuF9IuG:usECI1dALZSjL/7oDC252S0vb4IghRE0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.d7c1a164183b9c059253b896c7ca1e30.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          bb106f9d2e24e89768505fb48ee265b2

          SHA1

          b2efa66eb53af429805940a064e8555e57d8c495

          SHA256

          5aa4f91e8648b1aa6b5792abfb46af80ed043b7f695f4b38fce66a7aff61c799

          SHA512

          abbb503f41f10acbf01ecee825ca47b0226b6b4932631ed50d0b774a56ff567291a20b1bc4f33d4737d8f9e584c68a0401eb5e3065fda459cd416e839d6b942f