Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 02:20

General

  • Target

    a5b6f441465b2411ab14c5c4a12294d0_NEIKI.pdf

  • Size

    143KB

  • MD5

    a5b6f441465b2411ab14c5c4a12294d0

  • SHA1

    577528cad049d18d2f73bd894790a3016c5ab323

  • SHA256

    0739213e7d8acca983a73730a1399285717cb93f3a88c590b7f514d6d9654b90

  • SHA512

    db7f376ad854191aa4a95fa8ebd19cc5d56456a37a0be1ecf912b435110302f7c7634398c587124992f8e968f00fab71339bee2752161b01f56b97fe19a8eb2c

  • SSDEEP

    3072:V5HjAc5IkGsFcz96z0V4PvVc81eoQ4UclzNC8y6aqoWQ:fj5cB96z0KF/cA5fs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a5b6f441465b2411ab14c5c4a12294d0_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2704

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1c7e07a48ea44ba81afadf8c353dfe84

          SHA1

          54f8ba73d9e88193bd87691d2fdc963288c59f7f

          SHA256

          04401ef0339913cf17191c183b676dcb29c899cec5ebd066b960786ff9e09981

          SHA512

          d558965c451ac891c002493e4ae1881c182ccf587fa3ee6da7ab156e9fdbfd06b9e2a132129c1f8818443a903948b07c5a27bb8600a0279c7a5b73b90d164b6f