Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 22:29

General

  • Target

    7c0281b9e169a3528edd38e0fbb7ea30_NEIKI.pdf

  • Size

    94KB

  • MD5

    7c0281b9e169a3528edd38e0fbb7ea30

  • SHA1

    16c467aba884e2f547605e32d2e3f31ece6a33bf

  • SHA256

    65e03c9af2b2c68dd244bd8f5cd1eb6b44fff10b1efb52b3ebe21a3a5d01b4d5

  • SHA512

    2fb36f954cbe70294b2511fae9dc1021c29bf6ec78484d514478c96ffb9a99935bec316e548442ec61fea54b4e41df9d4e60811cf3656d9e1fd6f6b619208e9f

  • SSDEEP

    1536:iZWAzVMec79gjuo1uEpgGhrsjSfxLtGzW6n8emJ+oMP7M4F:ing9g6wfdftGzh8eypMw6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7c0281b9e169a3528edd38e0fbb7ea30_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2104

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8d55d7716dbad7b137f1a24e3fcd5d99

          SHA1

          b4c40725d712f805391bc3111e3d4eef64e85be1

          SHA256

          338eb313aa1eb485012760878f1e77d5ad6a00fe9be44a2f08810557a34ed7b9

          SHA512

          26532d90e1a1f6e66b759dff4b0adf9d3a4a3c4e8feba6fb78d9c8f92db48aef22abd77eba12ccfc9073ddfab197da2032a7bb147b2c6a155a38753d25927f63