Overview

overview

6

Static

static

6

99c774e0c5...KI.pdf

windows7-x64

1

99c774e0c5...KI.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 11:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    99c774e0c5a329674092c01a0ac02870_NEIKI.pdf

  • Size

    279KB

  • MD5

    99c774e0c5a329674092c01a0ac02870

  • SHA1

    40f7ccd9d49e02de809bfa8d454b8a45ea8ab669

  • SHA256

    ff79fed6127f5a8dfafe4ca131e6cf4b2787dd99bbbd3b22801d0255b674ce9f

  • SHA512

    b28c09b0d00b652a5dc51c60589de2c76fc5277905775fa318df837abc6062ad582fbd964738515d93835789477246c86e2d5b749845d04f405dd7a3c067ab2b

  • SSDEEP

    6144:hVlqsMJL63TvSXFfmTlY2JWq8n16CvgCb461DLm7+B7NFXGsm6:hes+L63eBmTlYg8c2gCb4Z7kN/m6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\99c774e0c5a329674092c01a0ac02870_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    28f419025238f6f83fff34541d9389a9

    SHA1

    efbafc234b246b00281cba6724fdc97c6d359259

    SHA256

    265f83664304033f1dad044161267b61e21ccc5bdbaaf7b5e8ba9a0fcd3ec7d2

    SHA512

    1c29a2f359844930ec138ea34a416dd8299f1418263d5649dd1bab9859a93d15f53ba1be77f421d418a10f09d5f99ff86cfc581849504b453de42e80ade8f573

    Download Submit