Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 19:18
Behavioral task
behavioral1
Sample
1ad32c50d5b61a2b845f55f8b12e6a80_NEIKI.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1ad32c50d5b61a2b845f55f8b12e6a80_NEIKI.pdf
Resource
win10v2004-20240426-en
General
-
Target
1ad32c50d5b61a2b845f55f8b12e6a80_NEIKI.pdf
-
Size
128KB
-
MD5
1ad32c50d5b61a2b845f55f8b12e6a80
-
SHA1
b6de6f4aadfa0773dec6bfad50e765465d8a4a3b
-
SHA256
232ca17cfd47c1879d09974abd734935df00e8f3fa4921404983becb03022e53
-
SHA512
6348341901aeb7e1f4f6db6abe9f59d4b14e8f32554629a41f683455e0b9b67a6e700ae64087800abf554a5f71192d5ada561a343b4ff46c1f8f3b159d3f7898
-
SSDEEP
1536:upe37i5pJT7SCgsq0/dyeahjm0/jnaemCBmjz7hMJTAXjZmnfhPOjQYdorvAMAil:1ri56CLq0zahjnvBmH7mGjZmfcQ+o0E
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2940 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2940 AcroRd32.exe 2940 AcroRd32.exe 2940 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a22f3278ac6ebe7221f9223be331bb09
SHA1504b95cf028eb224eddc1941489b9b15383996d3
SHA2565f66ddae6d4fdb7a5583f5ef7ff1495d858375d9bc34d64d9e2e11a4a74835b0
SHA512e572758132624942de70066ae716a63ecf93d0e509e40690e308415fc6ac1871636ada4f75d2b01e8ef9e5d6a234048def5b7eb1c58aac3f1c36cf2b996e57b2