Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
11/05/2024, 22:24
Static task
static1
Behavioral task
behavioral1
Sample
427aa269bb2ac0c076fc12b641a2be10_NeikiAnalytics.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
427aa269bb2ac0c076fc12b641a2be10_NeikiAnalytics.pdf
Resource
win10v2004-20240426-en
General
-
Target
427aa269bb2ac0c076fc12b641a2be10_NeikiAnalytics.pdf
-
Size
3KB
-
MD5
427aa269bb2ac0c076fc12b641a2be10
-
SHA1
0fa7332c7b4e5a64145056feb33ca2f7c380b214
-
SHA256
6edfae9e8b7bcc5e28342151a766fa37fc755553102e59fccd4a52832d50cea5
-
SHA512
e407840382e5d595122f721d909a7c559f9b51d4a6aee8a6ff7ab8c8c83ca9b934566472e033839ad5ed98c05636e39617e4b95d631a547c5f588f29647083ec
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2276 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2276 AcroRd32.exe 2276 AcroRd32.exe 2276 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\427aa269bb2ac0c076fc12b641a2be10_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2276
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD596f647e325edb665f7b52ea866cba793
SHA1a40de5904d33d51128def6b53a92cf2d0b695cc9
SHA25624d1410708530cbc7819dfe5e3ed2d400763f2613044149259bf73b595a363f7
SHA5128b055b8945c92ff5706ec10c800067476e1f075a3c6aea24c06a2848a0292101f95d658b3620990df4a91e04a2f8410d83c85adef0bc93d1a0be9caea4d55460