Overview

overview

6

Static

static

6

0796061d45...cs.pdf

windows7-x64

1

0796061d45...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 21:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0796061d45a42cf973d81a37e39119d0_NeikiAnalytics.pdf

  • Size

    507KB

  • MD5

    0796061d45a42cf973d81a37e39119d0

  • SHA1

    5af72a67320a44e4a05a83b8a903eafbf8b4589d

  • SHA256

    8477df84126fb473084e9a08d1fc367f8e4b4c0fb7f01781d16a1e97e305a053

  • SHA512

    ef926e829b6aa9235be5764709a263d1ccc93b2b278ea8c0b6d4b927ba33e868e55c65d2078fdde576cc5335c3049a634ea6717f100e7f9d85ac85fe60bf8dcb

  • SSDEEP

    12288:LrqLuQ5x4bhCIOkiPqOFuhj6/iqJp32OjDbtHsrBKu:LWLu+GbAnkZXR6aqZGKu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0796061d45a42cf973d81a37e39119d0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e587444e3f9b5123aa21befaa6c5d84c

    SHA1

    379e249324bb8c64441a7157d6e2d2fcbe7796cf

    SHA256

    dbee94573043e6d62ce8f9fe24aaabd2aac068ba8fd87ee821e8f35e0e6f00a2

    SHA512

    b5404d99673fd1d6b419a793722adf9b0efeef5ec637fbb3b4aba99cc72ccb0c94877c3c1e5fd6142e1fdb4217342728c9566099bd72abde44f22747135034da

    Download Submit