13ca4d156756f5bda1376aebcff1997c6be5f938f31258603b895879956179ef | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 17:41

Sharing

Report Analysis Logs

General

Target

054a875c438d55e4c124f633fce66560_NEIKI.pdf
Size

218KB
MD5

054a875c438d55e4c124f633fce66560
SHA1

90bbc3cb0918d54d007942685894381747b2b48c
SHA256

13ca4d156756f5bda1376aebcff1997c6be5f938f31258603b895879956179ef
SHA512

eddcd2e08992098a6b4ae4a6c4fa327eb0a283bd7d84eb353f58d5ce7443b441e09ac7831b717f94e8a80553ba840eb1cae3c66a3e49a2357eaace9ca6319742
SSDEEP

6144:iL5aWEEqMYugCigsgm2vawh0V28gyFCHVoH1:ilaWE/+VuH1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2388	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2388	AcroRd32.exe
2388	AcroRd32.exe
2388	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\054a875c438d55e4c124f633fce66560_NEIKI.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
839f1cbf5f5694f17f9392e932942161

SHA1
83972239aec743c701a678c1584816126e4ab633

SHA256
01d1c9df6c7934880cf1179f5da173f919488e5932015d057e4b44d3f03e4c0d

SHA512
f917a3e223ff78fcb1cf73c1aa29bc688abb4878e7c695e39b646c745f68969034cfb16fa80945343a24017871fda845eb02bc24ae540a6a03ed450c07058a10

Download Submit