Overview

overview

5

Static

static

5

3b387940a2...KI.pdf

windows7-x64

1

3b387940a2...KI.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07-05-2024 21:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3b387940a23199461a5175459fb84900_NEIKI.pdf

  • Size

    245KB

  • MD5

    3b387940a23199461a5175459fb84900

  • SHA1

    cc3192260eb1fa39bef4ba1997eb9157718cfce1

  • SHA256

    42595ca36057ae97eaa6ce1895f40f384bd3018c74bc493b490b7e85fe00c2ec

  • SHA512

    8cc03ee979822ffa3a96de47b2d96dadb1e9c594c0cc974981a4dcf86ddfa47c362e31c6499651e2280f6afed5ce059bfd3d8aec8bdfe171037d60e7bea9f421

  • SSDEEP

    3072:PeTbSnk9GU8K1kIfCQWkdXn8/JqZFOf2CPD2vO7xi3c+9otVHqPYp7blK/I/+mtF:SbSnkp9fCANnQoOHx3WgpP4g+mthXL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3b387940a23199461a5175459fb84900_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e8b97ad339bd093543207924d3b6100c

    SHA1

    ab81637d2c4b6a908d36fbf4b1b5056f63235545

    SHA256

    319f3d63f5864f3b1f1acec3a2f29f110864c3ce1016d79e4bfbc23853506e21

    SHA512

    a3c3bd3e56d83c501cbd28173b73c435ffab8f1d9b7e46d098756186f1dde392b4f45be9be56e6266a7fba12ee8568fea952c18867565160dc942f6f077d84cd

    Download Submit

  • memory/2524-0-0x0000000002AD0000-0x0000000002B46000-memory.dmp

    Filesize

    472KB

    Download