Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 19:48

General

  • Target

    2aaafc80ad27968e22642f607766e690_NEIKI.pdf

  • Size

    338KB

  • MD5

    2aaafc80ad27968e22642f607766e690

  • SHA1

    3fae7dcd2338022d85e453cad0c8bbe01d6c20de

  • SHA256

    38ad1e9dbf36fa6ba5ab06a5341794ae9141febdc853014bee1cf314aaf17245

  • SHA512

    e902e2c556fa36a95736c08598751b7fe82c8d4805c5b4389d85ee7e4147586c4f67e93360d078252a09ebd9079f518eee1a225c7bed8d5fb9d027748ee6d90c

  • SSDEEP

    6144:SOCuA4VbJByBVtnTftDgh5lQCvPZbol17QvC0H+DdK1OpO74:Slx4Vbv+TftDc5lQ518OK1GO74

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2aaafc80ad27968e22642f607766e690_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1652

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          888bdaed9f357684caeebe3623d1cbbc

          SHA1

          9c87f5b82d20e1c0ba3309e80254fca3ba774f5d

          SHA256

          f6f837c08ac59b8179b10a7523d8f52a96bd00c33078cb178bc1cd5fdd8af549

          SHA512

          1dfe3f096e867eb1332dd57c978b6db312cf16c7f0e66edadc348b35bbaa8db87eab5ca09bf5aa6c336eacb5f12fdd5b6b6d011684c38d77a463bb24febd42da