Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 05:56

General

  • Target

    ecbd7bab88c952f0c0ae1591c2248f00_NEIKI.pdf

  • Size

    19KB

  • MD5

    ecbd7bab88c952f0c0ae1591c2248f00

  • SHA1

    9e1166daf429a03a87a2deadd523d246b53c9e2b

  • SHA256

    a2b8eded5dcb2d8b27707a08730bacb486ebfbf455e55d283607b9461ac710e0

  • SHA512

    98d0888fa99ccb44b4d44c5e87a6b5baff7fb4b47bcbe2a9f132445e36ab59ecdcad1a7a265351b6dec94f9c0b9dd902a1624a63860b06273bc9a41c4be583ac

  • SSDEEP

    384:CwUdBzvfnraXNhr4/wasjRC4bH+FxByO5t5dI/I9KZLxLGdLP974Yb9Vab:CTreXrr4oNRpH+Fx0QtfmHZFidz974YA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ecbd7bab88c952f0c0ae1591c2248f00_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2156

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          382004129c189ab2bc96b2725b48779d

          SHA1

          5bf5f1c686b42e0698466abb9b3037cfbb1d31fd

          SHA256

          5f9b0da3ff3187cd8653ab62519a08aeddca51c9bd631e68372cbd5cc751220d

          SHA512

          e028af81eb71b04374bf86eb7f93c042af1b427446f9efed3be98a2454befffe319d86d3a2daccd842537e98522b762d5913431c03f5c5bfa2615f66982221b1