ad9819d93f7b00a32f2f58dd2093ae09ae7a4cd48b0553eb4b35292e8ac29521 | Triage

Analysis

max time kernel
150s
max time network
127s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
12-11-2023 20:56

Sharing

Report Analysis Logs

General

Target

NEAS.ed65a5233399747eac2f70c67ed1d6e0.pdf
Size

28KB
MD5

ed65a5233399747eac2f70c67ed1d6e0
SHA1

ee0d773583b20c70f20f2e5376b952f647d000a2
SHA256

ad9819d93f7b00a32f2f58dd2093ae09ae7a4cd48b0553eb4b35292e8ac29521
SHA512

c775069697e39c2be76bb87a08e81a7eabd6730bf9a661c05627d55a9f3ba00b7adaad07668a91bc22db9e73d5e9e08065533036faf110c204836bf701d74737
SSDEEP

768:6HUgHruBa6LXYfgCyvZ1YdF7N8uRzGHru:AVhi6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1208	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1208	AcroRd32.exe
1208	AcroRd32.exe
1208	AcroRd32.exe
1208	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.ed65a5233399747eac2f70c67ed1d6e0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
73e85686ac58bde006dcd8de81a4f660

SHA1
fcde4c24517903faa27a98b6538cb173b0701b91

SHA256
8d08256701891ea48a4dfe3e4544cacd21f44f70159abefd3714f4af4aede5c4

SHA512
627582884226f3a236c197d79739f176631746878dcc3fdee35ce93e84fb3ac5840aebacfae55fdd0667710d002f71ed4329b36d62d655b51422f3e870ee2a79

Download Submit