Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 02:38

General

  • Target

    d1c88facda1859b40ce00c76b76424a0_NEIKI.pdf

  • Size

    82KB

  • MD5

    d1c88facda1859b40ce00c76b76424a0

  • SHA1

    be05d13bbeabedb41cb67fab7db958869f255768

  • SHA256

    f65e6a478e6e84ab6f9116eade161dc052be54ca282c1df77ad01b4b7f6cf280

  • SHA512

    ea8c0a5c44f6c1d3853fe03a0a22351c87227f5562c5fb98f2225bed7c23118d6f44eaa998c25e2902d8bc43b09a729d689f00aec827c44c6154272804406a6b

  • SSDEEP

    1536:wAjqfvPec6tvE0+Cuwaf4FnYMm4W248iCe1fjEJ0zen9V7PXf0eJu:42cmvEJ3wrYMeL8iCe1CzbXf0V

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d1c88facda1859b40ce00c76b76424a0_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1044

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          47cec6ab3162e905b8606c4a8855b56a

          SHA1

          860c51d22c38167ebc2e8ac4e2f241dca880249c

          SHA256

          7d8203c771f4fe540632791c34b9a8c4ce6501095d17eed80dc3388f15469dd3

          SHA512

          9ff0b92036e72005b671cd8aab4f3db7c51084cdc7a7bb57aafd80e3d51608c4bb90b005abc26ffcfcd5252eb39b4424b33619125d697e305b7d311f60db589f