075f417a223d4435e318c73702c67256751c4584c7ba9f0a333fc59932055fe9 | Triage

Analysis

max time kernel
151s
max time network
127s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
06/11/2023, 19:38

Sharing

Report Analysis Logs

General

Target

NEAS.f9b3b8902d09c2e9a43c2d6ccdcad480.pdf
Size

53KB
MD5

f9b3b8902d09c2e9a43c2d6ccdcad480
SHA1

2fb50055d18e4756fedcb53f23b657d75427e8f1
SHA256

075f417a223d4435e318c73702c67256751c4584c7ba9f0a333fc59932055fe9
SHA512

fc9f6b104af5aa4020c834396de605b80350ad1550597e1cea6d4be0a7742be2284ec6768faceff9932997ad910511f0162dfa3495956b64575b1c847fdb7688
SSDEEP

1536:7r7ssdBDSOZBS18gL1PR55J74pFQwG6merH4Y:7r7s2ZBSbLP55qplm45

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2732	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2732	AcroRd32.exe
2732	AcroRd32.exe
2732	AcroRd32.exe
2732	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.f9b3b8902d09c2e9a43c2d6ccdcad480.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
bca1a98d29e1f919e95a4f18b0bc4895

SHA1
fea1340ec13986766ee8995c8303d93f03b89032

SHA256
7b2f6d4c6f4720590b277bb5938ee6e3e2eba79f74f102cb6d3eff8c31c63346

SHA512
894e3246605cf6b42162be3fd150e0c5cc396c8b1833c68acbf2ff80fcf1818cbe110b7d76d4a584bc625613336f312b873f1b79de7db6207380f6d467a32732

Download Submit