Analysis

  • max time kernel
    150s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    17-11-2023 18:08

General

  • Target

    NEAS.aaa142b9c24f5827392633ff20e55e50.pdf

  • Size

    715KB

  • MD5

    aaa142b9c24f5827392633ff20e55e50

  • SHA1

    cd9a049bd1d31d1ab8fa3b4a087337b015368af0

  • SHA256

    3c7bd7b6bcdadcaf1374df663bbf6a95f92cbd1fca669c1171a889d3cbd1f0a3

  • SHA512

    8ce6ebe589059658bafa0e062f72ea4de6f70a60f23bdb9b2798a55d0727638edf8915a23bdb9de942f5c4e963a3514ca0f48f952de8dac9204d29ea44f3f76f

  • SSDEEP

    12288:oUPdgNm2pwwEP7+HMS3kN2hpTnu7rRAX+z506rsFWvegHk9ly:yN65xHGpLuXeX2PrkWvfMA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.aaa142b9c24f5827392633ff20e55e50.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6002d0be4fc4e50d461d3861887fde88

    SHA1

    649bc220fd5ac4447f3e91033fc0be77f3abcd67

    SHA256

    ad0442454a57589f8716d6e257261ee2c5402d55951ef254f5630650ea1d4e3c

    SHA512

    812c6aaa71f2bda8f03c5eebf5f0f650bb9039ae6ed12ac3760efb01510a54a5c02f0474caa5abbf28084a0853c390701b285a039d697ad40b5e2923ab5b734a

  • memory/2252-0-0x0000000003330000-0x00000000033A6000-memory.dmp

    Filesize

    472KB