5da7d36235e67bb774cc36ba80a4a59e0633381b8f65575e94d0f3e78f35ce96 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
08-05-2024 23:26

Sharing

Report Analysis Logs

General

Target

986b41449413edf30ce8c094f545c650_NEIKI.pdf
Size

170KB
MD5

986b41449413edf30ce8c094f545c650
SHA1

3c56095f73ad054820ab9a95ac1585064fa8dedf
SHA256

5da7d36235e67bb774cc36ba80a4a59e0633381b8f65575e94d0f3e78f35ce96
SHA512

c1bfbcac0bf45e9894e8d51cc3c2fd5032ec563cf2caf4ca8b06a439e75f0d149c7a274ecf6e5ed96720efcedfb9a2d2323771e0d6060974f8c14c455f9cbf7d
SSDEEP

3072:oKz5EOueV9Ix5/v3WzyICOWayIoFT8JnocU:oc5EOu0yv3WzYOu2oN

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2288	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2288	AcroRd32.exe
2288	AcroRd32.exe
2288	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\986b41449413edf30ce8c094f545c650_NEIKI.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
24770094a8f7fcf4650e5a4e64971f30

SHA1
fa5adfb6a698c6e08c789eab7ce03ad0c3c9f907

SHA256
11504792eba2f5013a51932ecc97c259794426f3e4dbfda6e4377368fa59599b

SHA512
0bf7d1db56036d2977ee0f03d2503c0f68b33fc9b494ddf145020a4a623ea1106bf5d36aa799130cbf71ffdbd6f8a1c5dd5818632adeba4116b56191bdb9ef9e

Download Submit