Overview

overview

5

Static

static

5

3ebdd47e8f...KI.pdf

windows7-x64

1

3ebdd47e8f...KI.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 20:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3ebdd47e8ffcdedf52e78f86075e00f0_NEIKI.pdf

  • Size

    167KB

  • MD5

    3ebdd47e8ffcdedf52e78f86075e00f0

  • SHA1

    83dfca8169b44e4f6169009800bbe3a9b0208811

  • SHA256

    8061f1a9a817b0d8d12bf22c2695c4cb08a8913e899fbb5ada38b77d7cc0cb15

  • SHA512

    bc62a6e05ea128f8925f4b9636b74aff102d22c4909a9b9164b02d6a8bad214d2e847bedc4847553ba3d5014a86468fde97858b4698d8f305d20991cc7985f02

  • SSDEEP

    3072:X5deHb2SFYLp2Q/EMY05rTeqo9AT8r2/v5oDgJgrXI1S9N9F:pUXFYLpl/S05rE9AT8r2HSc2b9N9F

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ebdd47e8ffcdedf52e78f86075e00f0_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    309f34dc7a2da6f8405ed91474ed7d56

    SHA1

    28290116dcbcc312741aace1197eaa48bd3a200c

    SHA256

    6f8d26bc36b2560a2f713291d468341f15844578028fe016e3f2b290230d545c

    SHA512

    53885c4958ffb7fa53c0ea47eeb1a1da7c95359cb2f9b4de173c1f956ea478a68dc8b0c7409d59402b77b250e7c4277d8363c8eee44e2e42352bb3f1c95b0265

    Download Submit