Overview

overview

1

Static

static

1

NEAS.83bb9...JC.pdf

windows7-x64

1

NEAS.83bb9...JC.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    151s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    04-11-2023 10:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.83bb9b2677a153374029bb9e6ca797e0_JC.pdf

  • Size

    41KB

  • MD5

    83bb9b2677a153374029bb9e6ca797e0

  • SHA1

    f199c2c4bdd3560eca86d52809d05f6d9f337c41

  • SHA256

    d1b910d62d99f085d941f8ba1ab11e8b51d0a2d80d764a3c0f0151453669c710

  • SHA512

    5d835276006e04753f2af66c71fea135ec2064732fcce57b504c4cea9e3e159f076b0d962c6862c78857a2f624c1594dced1fc7264643f0149d94da4b89063e0

  • SSDEEP

    768:Q0hg6sZKJME1LjdPncp/HqRvgplb9yXdl8DSRzHgJU6ZNgNVv4ANd7Z4RQhxevgX:Q0hg6a0k/KRvgFyNODSxANZq4ANdVR+G

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.83bb9b2677a153374029bb9e6ca797e0_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2fde56ac703bd0e3df19e7727e2740c8

    SHA1

    f94074b219fb8a8023cd6158270f89b3fcc7e179

    SHA256

    8a541e40ece4600a85a4db4a47ab6baa5e50a165ff2e1990b80236342a12d3c2

    SHA512

    56fc31051bd803d8fe545c68ac468da48dd31ee2f583bd8e77e94b9ac25e9f4a039475f937a374c0dae79d5617ded35709b689cfc73518ac69e361c60ed71b90

    Download Submit