Overview

overview

5

Static

static

5

5da6cb14b2...KI.pdf

windows7-x64

1

5da6cb14b2...KI.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 21:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    5da6cb14b228445645b0c165d0379800_NEIKI.pdf

  • Size

    150KB

  • MD5

    5da6cb14b228445645b0c165d0379800

  • SHA1

    49ab540fff33f7cd735c61e9ebb944997a01faaa

  • SHA256

    192e29bf3f9eb06b11aa867f2a36fe03c038f38324f283d648a760b57ca1947b

  • SHA512

    f2b4af74a4a37c09f772d0f9aa79c0baa119fe9085413905d7d6cdc6ffa7f6b5a64ba425852db4bb28ecdf3bae19caa0fb6abc95813e415aa97bac256766c41d

  • SSDEEP

    3072:Je5M60xOdlA1cYDziGVb3M3TNwr5DCemoxH9xCx:J26OdlAiYDziGR3M35IJdTxa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5da6cb14b228445645b0c165d0379800_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2008

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          11386d00515cc7065fbd0214b7cb5995

          SHA1

          486c75f9cdd2982e9a1bec06937f1c897e40b88a

          SHA256

          2a678fbbe50663a3ea58416df77154f9ba41df947a2f6502787a83c160a63083

          SHA512

          4884161adadd1a013de571bed559642d0a5f13c1f291600725460e24fb0f85e673b0882eb6ec4d86ee97114055b3de83759e70c4aa182b7c757f756690194cdb

          Download Submit