Overview

overview

6

Static

static

6

5d505390a5...cs.pdf

windows7-x64

1

5d505390a5...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 19:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5d505390a53944b49756f68658153080_NeikiAnalytics.pdf

  • Size

    74KB

  • MD5

    5d505390a53944b49756f68658153080

  • SHA1

    58e54bad4427ae97e5d7b62a1633a7b1f69f98c4

  • SHA256

    b03f13dc7e351da0917f650cd90b0a1306436171655669b916342c967467e1b8

  • SHA512

    e50803d7be6eb5ab3fa858355fbbe9266fe79cc3d57a71334da8bd977b9140526285bd03eb1bed40ef3afd1cb6ad7ec04a174547e5992e53370e12cde19724b5

  • SSDEEP

    1536:c3hF0/1ukREU8yhCoIqh/nQxR8RH5QmRZWvEcs2QiTWn/4uf/F:40/19RphIYq+RHFRQEcs2xTW/4uF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5d505390a53944b49756f68658153080_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5b79c4ac2fc79e30810fb23b80c1a722

    SHA1

    e78bba078def13cbb5d7150683b43582d3c93a9e

    SHA256

    65676b9711e46611191d84c25e62b4d98e55d6cf42afa6891d4d0d305e2ca61d

    SHA512

    fece4801382a669bebe1969074cad3fbd3cad6b7d8fd7db5fe7c697c8fc9d6b7e5b85abac4e6c945f970c0126f29ba88a938a3d40e8cf623e46e4e83685fe93d

    Download Submit