Analysis

  • max time kernel
    152s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2023, 15:33

General

  • Target

    NEAS.01533d5a17bd3edb1469f0f68bee8640_JC.pdf

  • Size

    43KB

  • MD5

    01533d5a17bd3edb1469f0f68bee8640

  • SHA1

    921bca10aeb079af7a94cdd46086f6e0a260a444

  • SHA256

    5cf30d36d0ed6a5a2d86531221066d62d68fcabd4b4c63fa241968f88c64a2ae

  • SHA512

    bc0c2575c875a6fcc973d7c7c86b44ab854695de7f41327b113802b33741de2dcf34fcc1f7b4bde5f463f5f04ef9eac12cf7341df34959af5f6a5d56d7e9c6e0

  • SSDEEP

    768:Vzoxz1+ztVzp386azdpzz0wzbHYHrqdVB86pN6fSwLFwkYODw7RL/u+vtGP8EZOB:60REkAcSkv48FA4hqocPv2SFYLpgkW

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.01533d5a17bd3edb1469f0f68bee8640_JC.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4fd37ca7051b172b6a7ea20657c399fd

    SHA1

    9f70a85b8df4aab9db64599504cf9f8d9b5e62dd

    SHA256

    d95d51ecbe9397723e77c348887241f64a5ed252afd65a4d8b22164898c6ac41

    SHA512

    fda8135d687ece433bc453cfd2f040eee05ff919069a94e89b9f0d17ed767a5e40e531d988f6eaba596f26cbdcd174bb92776f3160e159916138c7331f0608d0