Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 05:56
Static task
static1
Behavioral task
behavioral1
Sample
ecbd7bab88c952f0c0ae1591c2248f00_NEIKI.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecbd7bab88c952f0c0ae1591c2248f00_NEIKI.pdf
Resource
win10v2004-20240419-en
General
-
Target
ecbd7bab88c952f0c0ae1591c2248f00_NEIKI.pdf
-
Size
19KB
-
MD5
ecbd7bab88c952f0c0ae1591c2248f00
-
SHA1
9e1166daf429a03a87a2deadd523d246b53c9e2b
-
SHA256
a2b8eded5dcb2d8b27707a08730bacb486ebfbf455e55d283607b9461ac710e0
-
SHA512
98d0888fa99ccb44b4d44c5e87a6b5baff7fb4b47bcbe2a9f132445e36ab59ecdcad1a7a265351b6dec94f9c0b9dd902a1624a63860b06273bc9a41c4be583ac
-
SSDEEP
384:CwUdBzvfnraXNhr4/wasjRC4bH+FxByO5t5dI/I9KZLxLGdLP974Yb9Vab:CTreXrr4oNRpH+Fx0QtfmHZFidz974YA
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2156 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2156 AcroRd32.exe 2156 AcroRd32.exe 2156 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5382004129c189ab2bc96b2725b48779d
SHA15bf5f1c686b42e0698466abb9b3037cfbb1d31fd
SHA2565f9b0da3ff3187cd8653ab62519a08aeddca51c9bd631e68372cbd5cc751220d
SHA512e028af81eb71b04374bf86eb7f93c042af1b427446f9efed3be98a2454befffe319d86d3a2daccd842537e98522b762d5913431c03f5c5bfa2615f66982221b1