Overview

overview

6

Static

static

6

88bfdf0b98...cs.pdf

windows7-x64

1

88bfdf0b98...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 05:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    88bfdf0b98db7cec6b0f5ee2a37c5730_NeikiAnalytics.pdf

  • Size

    562KB

  • MD5

    88bfdf0b98db7cec6b0f5ee2a37c5730

  • SHA1

    7cc4bb05d346cba01a5359ff07f1d231b8b7d2d6

  • SHA256

    6ba90f214a94747e61c07ae3cc28b571a9326d815b055c8537aebfc42b88c1a5

  • SHA512

    b27e9a380022ab88f4e492327ac7952af076c14399a7ef3c1d0311434ee619b0c1299e78c59088e923063d0aa092c026d1d959e0f798ff92a3cdb21cb8548783

  • SSDEEP

    12288:6s1Bpog2H4dN8DbWN0EZ20CpklIc3mb6cpNKXgPTESBnsmwl4YtCk4dOt4T:hpSHuUbWNE0CpkH8lNKXgb9Vo/iO+T

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\88bfdf0b98db7cec6b0f5ee2a37c5730_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c517771941db8f6bad3be2310740eb7f

    SHA1

    d503a31e8dc44d479fbdd1e32ca111afd3c09ea2

    SHA256

    71a808379f26bfa17e1aedede66e5a0a51a71142b950e6e3493b05ffebaeb948

    SHA512

    326a7203e075969ae94a8dcfc1c9bd6f8bb928d8b4837ef6933c15ebd100d8e22d0d782383ddc57417d6207824ce938be4131eff771da892a902a96ad3321332

    Download Submit