8b128c386a59a5f1f10af5e8b9bbdf88239aac6513f4e4adc04a2482bf85bfac | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
11/05/2024, 05:44

Sharing

Report Analysis Logs

General

Target

8b5dfdcb0d1cd125c9091d45002834d0_NeikiAnalytics.pdf
Size

2KB
MD5

8b5dfdcb0d1cd125c9091d45002834d0
SHA1

45b042ba886423e86e7b032e24497e3c0cb31cbb
SHA256

8b128c386a59a5f1f10af5e8b9bbdf88239aac6513f4e4adc04a2482bf85bfac
SHA512

313f56f4a791c42f5825b0aa3107b859852433eb1df1c7ac0e7031c4089112fc030f7efab5b6aa9ec8ca6ceca6685e19749d59210fd2645ae4c9008741a1e168

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1660	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1660	AcroRd32.exe
1660	AcroRd32.exe
1660	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8b5dfdcb0d1cd125c9091d45002834d0_NeikiAnalytics.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ce9322cfc3fb965eea04edeca67717aa

SHA1
76cf77e0b4dc881fe31268747c259b34d184e0de

SHA256
a09c792e474caff1e1d7dfb899ad941e8445fbe752f5039118b9530439f8a07d

SHA512
2638d84a6f7be001f07bbb7bd6baa43998ffe81485eb0960faafd90049f3769fc27c8ea37a13aa079bcb7bea5ee7963e8807efdd9a6a197f11e2d5a6ba31d236

Download Submit