Analysis

  • max time kernel
    156s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    14-10-2023 11:48

General

  • Target

    NEAS.0c559f59b3e35ff210c387d80a916b60_JC.pdf

  • Size

    73KB

  • MD5

    0c559f59b3e35ff210c387d80a916b60

  • SHA1

    c0f30ed0c3438e80c3f6de1059f45e7b5dfa4f6e

  • SHA256

    1ab85bc2ec31a4105a72123e0d63246b11261c85f7066e21418312a67b00979d

  • SHA512

    c46ded78bf0f66e33162e87ec98a026a61183c977936bcd30962d0a4bc31ae68cd65041ad44fe514a9cb7e531d214702aa5f2525c4166564f9534009031f2188

  • SSDEEP

    1536:f2gNjWGR00XPFX6oJFT3UFFjbVCzKaYRjcb9LdoKWHpOvTWkK8X7r3y43zn3aAIM:bNjBpNKaUfjbV/VRQbkav/5Py+zn3gM

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.0c559f59b3e35ff210c387d80a916b60_JC.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4fde05fcad2d09da2037cef2e961c106

    SHA1

    357b1fb382cd14f4701fe0811a2fbdcffa1cca69

    SHA256

    3d93f76714c1dacf733040e7684b8da01d083a61a2db2ef7e1ab7db050d07abb

    SHA512

    9c379129ec072d4642db49160a8e90320f66fbbb4dadd987b1d9c9db902f98cfcd662ef3b9ba59b1d44b5d941f1035519c8c62fc082cf68fb1b510d4cccc5ca9