717bad437a4299e5a0704dbc379f862dbf90d787ea86316de066dc93f01d12e8 | Triage

Analysis

max time kernel
150s
max time network
126s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
04/11/2023, 14:38

Sharing

Report Analysis Logs

General

Target

NEAS.761dc73a7b4931d35fb8db964ed9b720.pdf
Size

136KB
MD5

761dc73a7b4931d35fb8db964ed9b720
SHA1

fbb88f45fdb94d3958c4fcc5f2b061728a7e0a0e
SHA256

717bad437a4299e5a0704dbc379f862dbf90d787ea86316de066dc93f01d12e8
SHA512

394232b084262220cb8f0e2ea912706c3cddf6fa840f7f3b48a2b1cf7f2bb98d86a7d6d709374c902906c2b8070b6d747de3740caaffd9e01329241c8c787d02
SSDEEP

3072:312i56CLq0PahjnvBmH7mvUjZmfkQ+ozhW6:l2XIKjnvB+mFfknob

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2136	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2136	AcroRd32.exe
2136	AcroRd32.exe
2136	AcroRd32.exe
2136	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.761dc73a7b4931d35fb8db964ed9b720.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1b047afc39d64365a039b4baa4ffb7f6

SHA1
f723cf4013f4c47b9ac495a3b506f42710fa442e

SHA256
109441e4b155072ece7b85e529ec0f31ac0917c4f764a7bc23565b15031b93ad

SHA512
02b7e0f17a37eb19b08fd5f0eff4dc2bc09fc0c06b9dd4660f7ba3be15e3218e450b26e355fcfcc0121169f972cf280df1f38988f506cf56a777f615ebea3b33

Download Submit