64897f1ddc27faf893c21d2e8151751c62951ccce043c5f298fa94fe57c4a1c7 | Triage

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 23:16

Sharing

Report Analysis Logs

General

Target

93a2b1b8411c80bfa74aaea400680b50_NEIKI.pdf
Size

52KB
MD5

93a2b1b8411c80bfa74aaea400680b50
SHA1

9c58a46a625192c22f50493bebf30395dd7a5196
SHA256

64897f1ddc27faf893c21d2e8151751c62951ccce043c5f298fa94fe57c4a1c7
SHA512

c67af4dc7718fb0646b65a2cefe28d9e237d7ffcaacf2e7fa2d01801c2b3a91bba88e0016793cc54a70bbe39ffdd0fde24225d6249dd5338954a6bc3463beb09
SSDEEP

1536:rtHlWKvc0yUYask/NfkyAAHWL4NLWVlcGrD:LWzFUYeN8y12L/VD

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2952	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2952	AcroRd32.exe
2952	AcroRd32.exe
2952	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\93a2b1b8411c80bfa74aaea400680b50_NEIKI.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4fe8150419f6efc50a4b1218a6cdec49

SHA1
ebdbe2748c8853af6e30b9cce97a79bc54baef68

SHA256
2eb38be748f1ede131b9ac991faa966795d32f4f64ac63e7609a94f20cc5a41c

SHA512
532cb3c3690f42d3d4caaf1b1211b847d6327fa8029818981d4d4a74ca88e80e2f1ad8bc65c0dbdb65b68b4b065037c84691d26d703338b78a1e133d034b803c

Download Submit