Overview

overview

3

Static

static

3

NEAS.df56c...e0.pdf

windows7-x64

1

NEAS.df56c...e0.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    02-11-2023 08:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.df56c4d31ba30fdd33c3a5386717efe0.pdf

  • Size

    323KB

  • MD5

    df56c4d31ba30fdd33c3a5386717efe0

  • SHA1

    e4eab21a7804ea697cfa6a7d92ceb0095e0b52ad

  • SHA256

    f09a2598417ab155e40885ad1b68123004b81f0b942a79ad4e7467b4f18b7060

  • SHA512

    4e6c69e48fcb61a834e4955dbd1a544aee8075ae916c605bcd2e22309a887a70f2be73b549dc8b07a8da23911344f0ff518ff94c3de71d81f603f857e84e45fa

  • SSDEEP

    6144:gTcFDbeMPhbskDoGagPYyxgPYoWxx2bIuYfQPRKE/aAFD:gAFDblyk1a6ZpoWicuYiPCAFD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.df56c4d31ba30fdd33c3a5386717efe0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3aa85a68cf73441f54325bc4b2c53df4

    SHA1

    b27922e9c53e62c4db424c4a6bf609254b5d1289

    SHA256

    e71c6a3b98ccc5d8200746116b559c29a8849648f1a5d361af21bd8e4f8ccffc

    SHA512

    4c3fa8f5b38bc9e4b4b907c975f72500f0a61e910b89c4199fd9ccf4aa9dc2100bfc5fe9bb565cfa960abe7c0da23ab9d995ae4213b25ba3453417d279d31d9e

    Download Submit