Overview

overview

3

Static

static

3

NEAS.e3498...b0.pdf

windows7-x64

1

NEAS.e3498...b0.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    31-10-2023 08:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.e3498a4b6df96b89b1d421e4c016f9b0.pdf

  • Size

    78KB

  • MD5

    e3498a4b6df96b89b1d421e4c016f9b0

  • SHA1

    0077567bf219dafcf0ab879bee279f026b1a68bd

  • SHA256

    048b4feae6b5792086b12a730d83c7cc3a66d55e8db4e3c8a2fcddc19887a69d

  • SHA512

    4ce6263265d31b19eea8d8335446fe0a8f14eceff22d0d5947a0e70f04197cc1f631ce35ec90459fec574ae0fccd3ed26c3a6c6ccbf5806a60ff7c8a0fac8b47

  • SSDEEP

    1536:YttyRKzhJIfySP0DO1wDyIhR4iCJ3UOiWafe3r3nHmVWYpOedxi:Sy4IfySPaEwD9hRFCJ3UHfErWUe6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.e3498a4b6df96b89b1d421e4c016f9b0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d0f60ebb718354fc2199f0c17a5c10df

    SHA1

    79fa4a345ad58455502e20aa967f03b3bfc86d7a

    SHA256

    84be3ed23c968b512c53b7b26dfdc7d2b8057e84248afe96dc8b580c498b0cee

    SHA512

    99df6028a577b74f9b601a5f9f44891a5ae332118fe06ca01963ddeeb31534f7fb725c5f303beb69dfbaaa41e521796bf9ea6998d1d1a7f629f07014f0e5eb1d

    Download Submit