Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 00:11
Behavioral task
behavioral1
Sample
749e6e3d34c12a9a5d7f867d598e7880_NEIKI.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
749e6e3d34c12a9a5d7f867d598e7880_NEIKI.pdf
Resource
win10v2004-20240419-en
General
-
Target
749e6e3d34c12a9a5d7f867d598e7880_NEIKI.pdf
-
Size
68KB
-
MD5
749e6e3d34c12a9a5d7f867d598e7880
-
SHA1
e27f511167b177690cbf43e219b9f12899750ca9
-
SHA256
cfd355ebcfc46633ffb0fbd370b9c98075b2941063fba7de93b17c92a919bf07
-
SHA512
e0e028b70fca99be984c488f66c4a1c152cbe155f4bc1aee8a7f990ce33f57ed58273749b74c6822ef34312d2082abacc8472a5b0c131c44c48cab740283636f
-
SSDEEP
1536:6/9XY+6F/wWka5cfXTKEtev4rvsS2DWEwKVATkCyQFwQ9H:+6+w/65fXT9tVvsSAwKCTktm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2888 AcroRd32.exe 2888 AcroRd32.exe 2888 AcroRd32.exe 2888 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD514d8d53a124581b7d6ddefa323899054
SHA1a91636ec7b868b8f8e192d9c091b4b9706057a3c
SHA2567ede1beb235ed8e9b6c0e5f24362235b2a7dd9dd82bce11fe04c80b6359edfdc
SHA512724507501694552988418ce05bb5079a6e9eb68a366c6ec616abbfcb3b68f3c2dfa344554e4950e5fca605066587bac9ccb0ab840184433a51fee410c5a311ae