Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 10:55
Behavioral task
behavioral1
Sample
711fe86044cc9882242c9a695a7b24a0_NEIKI.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
711fe86044cc9882242c9a695a7b24a0_NEIKI.pdf
Resource
win10v2004-20240419-en
General
-
Target
711fe86044cc9882242c9a695a7b24a0_NEIKI.pdf
-
Size
312KB
-
MD5
711fe86044cc9882242c9a695a7b24a0
-
SHA1
25725273f5d5a19d2ebcaee29a6c3ef431454622
-
SHA256
71d73b49ddce0c92a6a87d89f32820ab1b9308f30ddcfcd9880905e2268163d2
-
SHA512
29006dd0aac40aa7f5e6870fd1020d8dbc5308e2469a83975453c158199985b8438de3375bbb36cd8d01687f4f8262d91a3d53a50e5895285e8941d3b0475da3
-
SSDEEP
6144:d7796+SuZPaKOlktfo4CvACehvasKDwysY5ri8k5/Gj+z/cPh:dPxSYaXlefoLehvaNDp5r9kMOi
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2220 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c258c53a122988628069d39e586f50b7
SHA103c516fe3ca4fc600b2428d70d2721788cddc010
SHA256c2900144abdd985650b8669091199048e308cfee53f9e05edcf0b0abbd29eb78
SHA5125ecc761369ce5d0670432f09bf78a1d94e89b5b3b0479167fb5f2c9ae8777b4bc1a6bbcc089734fffc4fa56292a7da24ba8b2aba033990b416d2a2e01caab77b