Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 20:02

General

  • Target

    626020df1881c0b6d8ec03d5e072e350_NeikiAnalytics.pdf

  • Size

    164KB

  • MD5

    626020df1881c0b6d8ec03d5e072e350

  • SHA1

    67f6aa2e5a75fbcc65c6e722468dd7c0b6fc414f

  • SHA256

    4e3f9049453de14fd398d4d2c439c92dce420eb42391e9002da88cbb1e335772

  • SHA512

    cdd7ccf7484a44a9f4f13db80a55e0323981a112a272b4887fa8fcbf501d1ecd4daedf323cc65408311d4c842e3b9b93dea238d97795d41dfbe3b620f1177135

  • SSDEEP

    3072:s68VLn+wyxL9uMFOShEpQZ4SwwFjjoUHi3Ae+zEgilFPpTKYA9yOsR:0Vz+wyRRFFAeJFRH+Ae+zHiLZKCR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\626020df1881c0b6d8ec03d5e072e350_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2972

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5f329aae6932d95a8dd6b4267a6a3265

          SHA1

          451002fdeb60ec948c12994e8a275303c1cb255d

          SHA256

          39e9c58473166a0e616167193c6a65c754f4e41e629d03b50ce29658bdaf53e5

          SHA512

          62a798eb94bfe92d98e66645abf73a14e24aa1a30ed7e1e49e150e048fefe83ef6ad9e9640b3a035f2f2b0dbe53c6c9d3fdb011f62fc7a77a954ed6b7a2bbf42