6eeaccf6d9acc853fbeea153ca80f041c9cb1c6940423c256b3107ed5883e486 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
08-05-2024 00:18

Sharing

Report Analysis Logs

General

Target

776fc08704d4f7c9120230d4fc6c7820_NEIKI.pdf
Size

444KB
MD5

776fc08704d4f7c9120230d4fc6c7820
SHA1

9b34c30ab642dc2db1fed4d3608218751c621ca0
SHA256

6eeaccf6d9acc853fbeea153ca80f041c9cb1c6940423c256b3107ed5883e486
SHA512

0972e42dc436e878408eeb3f63798d944237e870208303986835e2f7a7cd2366496eeb406cd9f2f279c9c7b2f5bc4f427b7b84498b4273007634ca93bacaee30
SSDEEP

12288:93Liy24idZZKwi9DyiWgMMe476+jmrLZTE8W:RE4IZKwiVy/PTJI8W

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2956	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2956	AcroRd32.exe
2956	AcroRd32.exe
2956	AcroRd32.exe
2956	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\776fc08704d4f7c9120230d4fc6c7820_NEIKI.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4c58536f948f8e0587a52c1fdb97dd6a

SHA1
cef44e92552953c3018698fa307438488005e96c

SHA256
68c4ca14e6633191aff8bf1abf8759d9e18550c137f25324647044da5a8c407c

SHA512
4dba63a63ebd568ac7be1f7b5df27758afcf93ef302ece59a2d86e99e0b44e013cbf8547f66c5d64cc64ae4e602ee7626962b0e58be8d778273d63d9ff83069c

Download Submit