Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    05/11/2023, 22:48

General

  • Target

    NEAS.378870676415605503d85bff2d06bdb0.pdf

  • Size

    33KB

  • MD5

    378870676415605503d85bff2d06bdb0

  • SHA1

    767f1561928b22901429aba6a8a077bd39630937

  • SHA256

    7148add4572205bba04962838ec2bef1e49b0d28b010d5cea2d62a8794285c6b

  • SHA512

    ea952e5655fb8d5d23f7f226840e6fa476f297e3ab838d6c35b229116871743531c201f24cb8604acbb3fa769ba2f2afb2d72fdb49ce730fb9655ff2d06dae10

  • SSDEEP

    768:Vz8zKCwtSfIfnPcG5BkgXidJGWIxwID3RiaXXqR0YiOx4XSjjFYLpRr8Fy6u:h2Op7WIuID31XTW2SFYLpg4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.378870676415605503d85bff2d06bdb0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1244

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          668583c490979fa2fd5b29f7e8b74b79

          SHA1

          6736ddbf8b55058f52833b11c6569dfd68c3bb33

          SHA256

          68581bed9aae55ff416ee6e8f37bd3314ac226d79a889e001e70fb3f83e37286

          SHA512

          10a6fddb3671227c702c6ccf9e057dd3a3035689c48fec72863321d01692ea85ad72050e097615b3e6581f48cb63de6b6bbe8b5752f6866482fd8ec6b5384d35