Overview

overview

3

Static

static

3

263957d525...KI.pdf

windows7-x64

1

263957d525...KI.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 19:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    263957d525d2d05c8c50fcfe0430b440_NEIKI.pdf

  • Size

    268KB

  • MD5

    263957d525d2d05c8c50fcfe0430b440

  • SHA1

    42b256efc64a9807bdebb7b51512c48675d1b2a7

  • SHA256

    359a7ccca2d460a8b98c197a1b3a0b9182c80216379e44a34b7b3b8f1cc7a839

  • SHA512

    3852ac099455eeefe2c16b46c1e43eb1895a690706bfa2ffbc9119a7105676a70c45a9fbd0bec1f4690266af8d841d8ef332987a01c3bbcfe47d568cb20dac95

  • SSDEEP

    6144:OD+qZ59Mfz3wneJvpUFXMbydbe95Hn5iSzyfHkXLNmphaMLZNx:je59MfzlJRUBUy89V4wy8TMdNx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\263957d525d2d05c8c50fcfe0430b440_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b5d92f972867924aa6df8a82e1dc2916

    SHA1

    48e01b8e2452c0cda66cc0e9265fde26fe87181a

    SHA256

    d4a459ed622b1b905ea27a2a3131ed3fa06dda675f9bb8364696c95ba5de1899

    SHA512

    db18ea05f4d5c008b6d91569e6d1d2417aebb73cbadeb63a0e79c0401b1029aa3894a4b9d8167283a37143d925f9f73c0fef6e8ad86441a69e50912328a5ced9

    Download Submit