Overview

overview

3

Static

static

3

35bca881ae...cs.pdf

windows7-x64

1

35bca881ae...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 17:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    35bca881ae5b0d639161016b21e09390_NeikiAnalytics.pdf

  • Size

    76KB

  • MD5

    35bca881ae5b0d639161016b21e09390

  • SHA1

    82f6f3a3186a0933b4a32635d5df30717ac8e683

  • SHA256

    dc4a3bf9e67e4525eed020ac7aafbf1231c035fd4fab08e8410b25b1555bac75

  • SHA512

    2f9cdec8ad1d018ef6b48b20b1ee6255320fab2d3617fddb7d1f2fabf831d9d8b7ad082bf40e83531bb2e0180b69fc49ceb2fe569e13525f148a5f2584d4628f

  • SSDEEP

    1536:k7How0xzfNHlxVsQWUxYWi1juRZZb8nMFwjT+xVw/dqxiIrOkK:LwGfN7VsPUxQjuR/oMFwjT+DxiIr+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\35bca881ae5b0d639161016b21e09390_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    ea2fe4b67a0f9cb284f13790a38e44a1

    SHA1

    a1d1e8375e7bb72e4a1ebe4dfacd91a7ba19ae6b

    SHA256

    455ab584b7038d064c0fa8c758b9358cededc69bcc947f49e9df8571afc145ad

    SHA512

    87f3debf6fe4d294c39b646cf070f445a06d12c946889b7ece21f0a04b1d93d15fc6da9906f639c709e1ee137f927def0110d71ab529893e6fc794505d31bac2

    Download Submit