Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    15/11/2023, 05:33

General

  • Target

    NEAS.b123258ee7a6228ec1a8d10e679f35c0.pdf

  • Size

    38KB

  • MD5

    b123258ee7a6228ec1a8d10e679f35c0

  • SHA1

    ab9d9262a34611b12f4fe4346817f14f0ae2c6fa

  • SHA256

    deae6c2cc79176660ba4fb28ba90e2828c9d194944dc334cb6af0d9db7331cd0

  • SHA512

    3e7e210b01d3dd3e65f4835236841a84cf57208434138ed98657b6f72d23622bc96202fb29f03cef6fc6e83c64bbfd7875780b663161359880a4eb2b14a871c0

  • SSDEEP

    768:Vz2zJNN/bxwvbK2SEd/nX57S89koxZBt+kSiP4XSjjFYLpRr8Fy6OjQ+J63ns7W0:yWfXRSJoUg2SFYLpgp+cnzZJSTN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.b123258ee7a6228ec1a8d10e679f35c0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2092

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0734cddcce69e550b8083424e4bbdec2

          SHA1

          c79e58f775e0784efb403f399b2e8f84d3c7c8ea

          SHA256

          4d4e3a9f727d89b7403a0263d365704865853c6066fbe938ce52ac38c9345918

          SHA512

          747f0e180e4f112b574be21b2745e0f9733876eae3d16fade302527946a97d1ab44c282e1454eb25cd10c7ab1bc05601e37330e16ed359ee207c20429ab27666