Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 19:18

General

  • Target

    1ad32c50d5b61a2b845f55f8b12e6a80_NEIKI.pdf

  • Size

    128KB

  • MD5

    1ad32c50d5b61a2b845f55f8b12e6a80

  • SHA1

    b6de6f4aadfa0773dec6bfad50e765465d8a4a3b

  • SHA256

    232ca17cfd47c1879d09974abd734935df00e8f3fa4921404983becb03022e53

  • SHA512

    6348341901aeb7e1f4f6db6abe9f59d4b14e8f32554629a41f683455e0b9b67a6e700ae64087800abf554a5f71192d5ada561a343b4ff46c1f8f3b159d3f7898

  • SSDEEP

    1536:upe37i5pJT7SCgsq0/dyeahjm0/jnaemCBmjz7hMJTAXjZmnfhPOjQYdorvAMAil:1ri56CLq0zahjnvBmH7mGjZmfcQ+o0E

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1ad32c50d5b61a2b845f55f8b12e6a80_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2940

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a22f3278ac6ebe7221f9223be331bb09

          SHA1

          504b95cf028eb224eddc1941489b9b15383996d3

          SHA256

          5f66ddae6d4fdb7a5583f5ef7ff1495d858375d9bc34d64d9e2e11a4a74835b0

          SHA512

          e572758132624942de70066ae716a63ecf93d0e509e40690e308415fc6ac1871636ada4f75d2b01e8ef9e5d6a234048def5b7eb1c58aac3f1c36cf2b996e57b2