Overview

overview

3

Static

static

3

NEAS.33a13...70.pdf

windows7-x64

1

NEAS.33a13...70.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    31/10/2023, 08:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.33a13a7c582b31d988616ee07b276c70.pdf

  • Size

    59KB

  • MD5

    33a13a7c582b31d988616ee07b276c70

  • SHA1

    57072cc0196ff2e6819a03c791c8d39a3d9d60eb

  • SHA256

    5f0eeef567733ad70123107da4cb1395844f76e89edb861b0ad6e48737f0ac05

  • SHA512

    03e097881b381c0eb2acc5a7a605094573ad57cb0f5e618dd8ddda781bd5a761d1c0b37b173c05332e3083326905eec579f467c8b4903a355e4d0bf9b08bbbbd

  • SSDEEP

    1536:gfl/IOeJNDVaOdsbjsbxCCCOE6zhimD2/fZZmwn:gfl/IO+aMbUCCnSiY2/xZf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.33a13a7c582b31d988616ee07b276c70.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    6481e783468d7bb2d2e23066c34e42dd

    SHA1

    c4c919de27f4ce1c7d62f2d7ee7ac7da8987ae94

    SHA256

    08c1dd2f97b1e0ee6be1f04f72cc74aef0a8c7cc41913c5ffd3dc93f3211ebd6

    SHA512

    3538e21aba78ebbef64edfa333756d10e4136ae9793138f5eeecf85e4b6b7e9cdc70b02e6aa21f9177bf554a0b48dfb8a376e76d9a1cf5f91fbc6fa5820dab9e

    Download Submit