Overview

overview

3

Static

static

3

NEAS.901d2...f0.pdf

windows7-x64

1

NEAS.901d2...f0.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    182s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    04/11/2023, 14:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.901d26aa36ca0d668196fb399b05bcf0.pdf

  • Size

    849KB

  • MD5

    901d26aa36ca0d668196fb399b05bcf0

  • SHA1

    1f175eedff59d1748d0f9eb6f824d0f5f896b857

  • SHA256

    002fc2a41c5d96455a68035bf9c6c285c0b977e1d246e7022ecda64673879287

  • SHA512

    ee32657829de35ff5dc61979572bf26e70283ff6bd7c7c5b7e46a139b3c55e4b82a30154cefcc28f49cbbbf44f6e81751c416132ee61d9a0a9950ff7c19485e1

  • SSDEEP

    12288:SQiOU/B5H1CoSr7OAM8VRLMzonOrgHUGo+r2BTEisxEs2xeiFFfZxuzmSd:gOUp+Pr7OAM+Rwzod2BTErEs2dvny5d

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.901d26aa36ca0d668196fb399b05bcf0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    05c0ef34754c5373ea93d085c968d2ff

    SHA1

    e6ebc3ed4387d9723c0490c5c50ec5b72c6a5c6b

    SHA256

    bbdf5e9c973dc50e2f1397311bf9fbcecd68be26a4f1476401b45679f4993554

    SHA512

    ba103c383dbacb4fb82c6dc74cfb1e1e862b95fd0d7158a32435eb9c819c357a57fb97f8ca10a74d476f16c2617c9b3c869b9bb0f4557256d7a5a321261a7706

    Download Submit