Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11-05-2024 02:48

General

  • Target

    60cad98ccdbb60b5200f35dacebc5af0_NeikiAnalytics.pdf

  • Size

    161KB

  • MD5

    60cad98ccdbb60b5200f35dacebc5af0

  • SHA1

    3ccd9bea5e0f5ade176b377815aa9766a1ab51c1

  • SHA256

    88e43c06c68d079531ff898873faeceb40c1c8a0d1792f788ca89db75875caf9

  • SHA512

    25afd4a4f36ce3acd5d7f148cbe86aac6e8529a0d37a3ed2586ea26e1f4d4e9f22d72d3f0a61c4aac16d5541588a2d2a26a985f3fca73374fb304dbb003b4077

  • SSDEEP

    3072:rua746pukN8M2EYBm7MtuM6SF2hEbcnWWD+8V+J5XPgyCSoduqpb:rx74kh8MZnc2icnBV+XXPBnoL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\60cad98ccdbb60b5200f35dacebc5af0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ffeae95ad3579be0ffc3680407bd62e4

    SHA1

    1ad125fe16324a5dfe53d01dc44c71671d2a7269

    SHA256

    4807590e966a83486ada152f3a85dc71c2cb4d2501de35854beaa8437296e72b

    SHA512

    f8fdd5b15dd6cab3765c84c3f84bcafbbdf0ec364a1a9e2e176f49ec2ddea3ce4881004f0cb0e52c8a7820fc667ee638cdc23cf91ad47b53505e850e19881a8f