Overview

overview

3

Static

static

3

NEAS.31543...JC.pdf

windows7-x64

1

NEAS.31543...JC.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    23/10/2023, 20:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.315432393331b67564753cbdf81b5230_JC.pdf

  • Size

    52KB

  • MD5

    315432393331b67564753cbdf81b5230

  • SHA1

    4ce0dd9ec226791c203507ae2acd3e167ad2e126

  • SHA256

    1304c50df11a1087fcf233b0b1df236bbfeb7807638a89be5e17e883034021d8

  • SHA512

    79d95081d6dea703a328d94ceb7ffb611393db4984f53ee522c6e1f94ca338b3067c5e98ee333c02ee2bbd8403db0231ea3083c0353deeb0875bb8696e76c971

  • SSDEEP

    768:XuzdNIggou41dMV+foYlP13g8G/9lwi11iU+XF3l/GExIYdAkIZEIQ:+zIW1dMV+foY5s1lwgifXF35GEiOTIQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.315432393331b67564753cbdf81b5230_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d291bf1b7ff09971632f1cac5aadde37

    SHA1

    8278165faef64864b67f7a435fb00cf7b743f5fb

    SHA256

    a218dc45253c6d32f382afe163a1c97d77d7fe5393ec5bfdd587c3c0708cba55

    SHA512

    653e7d250056332a68bb76e23bc63a3d897760868bdfccdfa173283cb6e0bfbfecb5baed16b05f5ad6e589ef57bef4b992a5551ef881cc0cee20ef10a8fcc8fc

    Download Submit