6edfae9e8b7bcc5e28342151a766fa37fc755553102e59fccd4a52832d50cea5 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
11/05/2024, 22:24

Sharing

Report Analysis Logs

General

Target

427aa269bb2ac0c076fc12b641a2be10_NeikiAnalytics.pdf
Size

3KB
MD5

427aa269bb2ac0c076fc12b641a2be10
SHA1

0fa7332c7b4e5a64145056feb33ca2f7c380b214
SHA256

6edfae9e8b7bcc5e28342151a766fa37fc755553102e59fccd4a52832d50cea5
SHA512

e407840382e5d595122f721d909a7c559f9b51d4a6aee8a6ff7ab8c8c83ca9b934566472e033839ad5ed98c05636e39617e4b95d631a547c5f588f29647083ec

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2276	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2276	AcroRd32.exe
2276	AcroRd32.exe
2276	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\427aa269bb2ac0c076fc12b641a2be10_NeikiAnalytics.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
96f647e325edb665f7b52ea866cba793

SHA1
a40de5904d33d51128def6b53a92cf2d0b695cc9

SHA256
24d1410708530cbc7819dfe5e3ed2d400763f2613044149259bf73b595a363f7

SHA512
8b055b8945c92ff5706ec10c800067476e1f075a3c6aea24c06a2848a0292101f95d658b3620990df4a91e04a2f8410d83c85adef0bc93d1a0be9caea4d55460

Download Submit