Overview

overview

3

Static

static

3

NEAS.1182f...JC.pdf

windows7-x64

1

NEAS.1182f...JC.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    151s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    14-10-2023 12:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.1182f5423bb80954fab9a3bb9ef281c0_JC.pdf

  • Size

    47KB

  • MD5

    1182f5423bb80954fab9a3bb9ef281c0

  • SHA1

    1a977794a3579f22244d71e3eccf70dbef75b0af

  • SHA256

    14b4d3b354751dc5f6776c033452416eb16dcb6a16ff24c766639bbba6c3c60b

  • SHA512

    e2725382890f6ffa10979e9d50ab5fc0a9ed754575d170954408cea2bee102523a55cddf89ef088efb4206a343cc46ff5a3e0f39203a4db07e3dbfbf271da6a0

  • SSDEEP

    768:Vz6jHa2OINP9z1yXDcNmofx0k/Ym+lQx8FCbqry50Onw4XSjjFYLpRr8Fy6T0dKx:YHaYkYbgSiCbDw2SFYLpgKvzOo93C

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.1182f5423bb80954fab9a3bb9ef281c0_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1d8a9a14c29598876d6477e38f0d673b

    SHA1

    bb0bf4f5cba6cb25383a0011dfb1b51cf592265e

    SHA256

    5e40be640323840851d5965c7e97c68c67f4105145fa9ae09917a9a68ebb16c8

    SHA512

    ddf9f450070b5c758ccc91bae8f65b2822593ac3d76d08b328a1ba793a77819a0270de578221964161f28a04575f1866dd12039981c7abec14eb7322867c7536

    Download Submit