Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11-05-2024 02:48
Behavioral task
behavioral1
Sample
60cad98ccdbb60b5200f35dacebc5af0_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
60cad98ccdbb60b5200f35dacebc5af0_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
60cad98ccdbb60b5200f35dacebc5af0_NeikiAnalytics.pdf
-
Size
161KB
-
MD5
60cad98ccdbb60b5200f35dacebc5af0
-
SHA1
3ccd9bea5e0f5ade176b377815aa9766a1ab51c1
-
SHA256
88e43c06c68d079531ff898873faeceb40c1c8a0d1792f788ca89db75875caf9
-
SHA512
25afd4a4f36ce3acd5d7f148cbe86aac6e8529a0d37a3ed2586ea26e1f4d4e9f22d72d3f0a61c4aac16d5541588a2d2a26a985f3fca73374fb304dbb003b4077
-
SSDEEP
3072:rua746pukN8M2EYBm7MtuM6SF2hEbcnWWD+8V+J5XPgyCSoduqpb:rx74kh8MZnc2icnBV+XXPBnoL
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2752 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2752 AcroRd32.exe 2752 AcroRd32.exe 2752 AcroRd32.exe 2752 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\60cad98ccdbb60b5200f35dacebc5af0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2752
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ffeae95ad3579be0ffc3680407bd62e4
SHA11ad125fe16324a5dfe53d01dc44c71671d2a7269
SHA2564807590e966a83486ada152f3a85dc71c2cb4d2501de35854beaa8437296e72b
SHA512f8fdd5b15dd6cab3765c84c3f84bcafbbdf0ec364a1a9e2e176f49ec2ddea3ce4881004f0cb0e52c8a7820fc667ee638cdc23cf91ad47b53505e850e19881a8f