Overview

overview

6

Static

static

6

af77d23174...cs.pdf

windows7-x64

1

af77d23174...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11-05-2024 11:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    af77d2317408a883c14c4c9323313ca0_NeikiAnalytics.pdf

  • Size

    328KB

  • MD5

    af77d2317408a883c14c4c9323313ca0

  • SHA1

    0bca12b6f63dd3c7bb347ed9ed9155b27c2276c0

  • SHA256

    3e87951e666cd1048b04c9c0e5b7233215c87883159cb92ecc022d07e8d16bb2

  • SHA512

    911aa7ab14c270a94739a9c3330029ac275ec526dcb3b8cdceb835aa6f7d3c7615d89279d4fb0ca2c0020440e9a84bc99afbc5662f465f23d45adac3c3ed8c41

  • SSDEEP

    6144:HFKdniUk57R56GkBhK2FJe51SYUngsfd96KDE8LLPCseumCYIo89rt:l9Uk57KGKhK201Tyff6WzrVpmRGrt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\af77d2317408a883c14c4c9323313ca0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    74e35a452e9b9ee4992f3f99616f14da

    SHA1

    9b339ef90735e69b8198603c5a944332910b9abd

    SHA256

    5f923d47804e302c8952c2a91a57edc1fa6f702e9144e554af64dc5e1c42882a

    SHA512

    c83fac971feff18f021fd0275d345096e7fe47db13484912d25d96b635286d0f4418ffa633c37f30fdbf4142802d6e7dca5c2152d9e79219d52a7f4460038b5a

    Download Submit