d7700e5a608cd7a1ccf29458537b5cf8278b89b9dc2c8d7ff2797da65dda3ff5 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08-05-2024 23:03

Sharing

Report Analysis Logs

General

Target

8cfe630a040864e2f67f91dd9ba34550_NEIKI.pdf
Size

133KB
MD5

8cfe630a040864e2f67f91dd9ba34550
SHA1

a2b52131654490758c6c1d3d51c87e7abce6ed24
SHA256

d7700e5a608cd7a1ccf29458537b5cf8278b89b9dc2c8d7ff2797da65dda3ff5
SHA512

7f232d3f4ae6df7a19c0285d40174513c4ca7b664bf9affa8619c8ab701bc485f539cd5ddaeb04e1ff1c857a9260bf7b07cb12d18a1d82251617be48655476ad
SSDEEP

3072:eXRi56CLq0NahjnvBmH7mCjZmfPsQ+opM5d:ehXyKjnvB+mPfUnoy5d

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1712	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1712	AcroRd32.exe
1712	AcroRd32.exe
1712	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8cfe630a040864e2f67f91dd9ba34550_NEIKI.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
aa504689e9e27e79b1ffa10cfe4ee316

SHA1
23c3cb4d3697d4c1feeeabf0e285cafc0a5b29f8

SHA256
95af5350ebb4399f3e8865d0b474e46d02e9205fd7c1a56de1b38a4089c85353

SHA512
185571396479ae912188307286d848ba34a725bee8c0236f2fcb73a9ff178e49554c020ba88ed076f7246c3ddb767609cfe84e4bebe1abd84bb059b691e5a7b8

Download Submit