Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 19:48
Behavioral task
behavioral1
Sample
2aaafc80ad27968e22642f607766e690_NEIKI.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2aaafc80ad27968e22642f607766e690_NEIKI.pdf
Resource
win10v2004-20240426-en
General
-
Target
2aaafc80ad27968e22642f607766e690_NEIKI.pdf
-
Size
338KB
-
MD5
2aaafc80ad27968e22642f607766e690
-
SHA1
3fae7dcd2338022d85e453cad0c8bbe01d6c20de
-
SHA256
38ad1e9dbf36fa6ba5ab06a5341794ae9141febdc853014bee1cf314aaf17245
-
SHA512
e902e2c556fa36a95736c08598751b7fe82c8d4805c5b4389d85ee7e4147586c4f67e93360d078252a09ebd9079f518eee1a225c7bed8d5fb9d027748ee6d90c
-
SSDEEP
6144:SOCuA4VbJByBVtnTftDgh5lQCvPZbol17QvC0H+DdK1OpO74:Slx4Vbv+TftDc5lQ518OK1GO74
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1652 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1652 AcroRd32.exe 1652 AcroRd32.exe 1652 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5888bdaed9f357684caeebe3623d1cbbc
SHA19c87f5b82d20e1c0ba3309e80254fca3ba774f5d
SHA256f6f837c08ac59b8179b10a7523d8f52a96bd00c33078cb178bc1cd5fdd8af549
SHA5121dfe3f096e867eb1332dd57c978b6db312cf16c7f0e66edadc348b35bbaa8db87eab5ca09bf5aa6c336eacb5f12fdd5b6b6d011684c38d77a463bb24febd42da