Analysis
-
max time kernel
121s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11-05-2024 00:06
Behavioral task
behavioral1
Sample
360854694fef52a6fa6ad3889398eab0_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
360854694fef52a6fa6ad3889398eab0_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
360854694fef52a6fa6ad3889398eab0_NeikiAnalytics.pdf
-
Size
425KB
-
MD5
360854694fef52a6fa6ad3889398eab0
-
SHA1
2d10556891a61d072c35763b6bea55d270bd3a2e
-
SHA256
6b92440c4a19b1338394afac2721ad7a281357742e2da9d5ee7e3270ea1d6543
-
SHA512
86cd4a0e9be5efe9bd9344b61f56de00fa012e60a824f5b311e8d867ff3443412057a4189e416ec9708bb0e39483c49bd6bd1ecd238675c4e1cb5b7ee6c533f1
-
SSDEEP
12288:cYP/E2W6ehnMXyf4LSLU8Cw0x3kzN1i+6j9Zy:cg/7mHgLjx3k56q
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2804 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2804 AcroRd32.exe 2804 AcroRd32.exe 2804 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\360854694fef52a6fa6ad3889398eab0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2804
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f836b9d4c65435a30fcad7204d40a062
SHA1039fe5b243460bd3d7042d94d29296ec8f763a9b
SHA2568b36175cb8a37c228ed1542c49d9699362a9596171363ffdfc82e8a429379179
SHA5123465ea07c3052abb5fbd4572836ae25698761273f33fd562ee587c0a6d2c4d0111f5599e4ebbba68277f3397b6c2e0bb39599a1e5b16e300339d9cfa7a85751b