Overview

overview

3

Static

static

3

NEAS.dd758...d0.pdf

windows7-x64

1

NEAS.dd758...d0.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    152s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2023, 10:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.dd7582b495d27f99f8c1405ffac338d0.pdf

  • Size

    450KB

  • MD5

    dd7582b495d27f99f8c1405ffac338d0

  • SHA1

    e652f33dcf038e337d6f5d49cd549ce2a352b7dc

  • SHA256

    08c5ab9da0c76329527dbb5e5ed5c743aa3ace0b2a1efd256e22679ea76d3111

  • SHA512

    84630820e029e5239a6c89f4acd25b58c2d6ad0fae7c82118958ffbfdfac330f2de2664814f539b9ad5532d2636552d3fde22c4b58073e98fcf1dfff72ecca32

  • SSDEEP

    12288:ce50+yh/2MtajmereVwp7oMFXsYNE8he4hSeTpEkcQ:cAqsCOmjy7o6zE8U4hSSwQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.dd7582b495d27f99f8c1405ffac338d0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    db05af8eb109e7cad1af91a08824a3e5

    SHA1

    915602432eac2ac29283dfaf3fa38516303696ef

    SHA256

    2993100c85511eaf24c662aa7ce3bdc00619192b9b7b26939569c65805f282f7

    SHA512

    2a230f181b94abaf8387a0b856ba59a35529dabf7559aad7de7f3b2905ebdb40e56cc9d43baedf61ada2b5d9c1430860d9048fe4edb012e6a9d82c81e954ac8c

    Download Submit