Overview

overview

4

Static

static

4

NEAS.f72a7...JC.pdf

windows7-x64

1

NEAS.f72a7...JC.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    04-11-2023 09:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.f72a76147d0fa975422360e839daf950_JC.pdf

  • Size

    444KB

  • MD5

    f72a76147d0fa975422360e839daf950

  • SHA1

    1c1dc6861e160a473e880a395629c8105fb700f9

  • SHA256

    20a67674bcc3f904097a3a08cf28ed17a6d580d8cd57d27da19ed6a68839a13d

  • SHA512

    81841d839ac17637153c64584e8ac1760d3208a263148f6fc26f30bd7b2e3e2ee4556bb8288f1d3c965b012b324a30f40065be266c4cb93b4bc8f41ed074b761

  • SSDEEP

    12288:vMDYNZN9RtSR+nThxLn897wF5Bso77aZrvVcp2:vMDYNZN9RthnT3n897wtCdWA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.f72a76147d0fa975422360e839daf950_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    43e7929208a1fac268cd987b26b6b484

    SHA1

    66dbf5f3527731c403c7686494635948b85d430d

    SHA256

    3fe43af92e7d12dad1f3026235af0dd03827870172597a8f0083a91f69aea06b

    SHA512

    38baedf588fee882cab43b041f88b703255e228fa42d7dc797f888dc2a65fa449d0fa5981e8fbfb047ff6c1d2ba2de9d33228333e0e73f30591b1e67814a8ce1

    Download Submit