4cf3c1dc6d4977998542b7a7472dbc9d56a07af2ddc73a87843247b8309d5d96 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
11/05/2024, 13:55

Sharing

Report Analysis Logs

General

Target

0b0019c5b0d2759931c75c554a4f2bc0_NeikiAnalytics.pdf
Size

3KB
MD5

0b0019c5b0d2759931c75c554a4f2bc0
SHA1

491f21815d07c2087b4cec4406833b3030c38486
SHA256

4cf3c1dc6d4977998542b7a7472dbc9d56a07af2ddc73a87843247b8309d5d96
SHA512

a0d22359efdf2f25061d298ef264fb48dcbd01489c7b9df69dcc360266681069aa0220e8ffdfbf547bb243d4f212df45c9c13cb7ebd2344e8cdf546e0db78c32

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2924	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2924	AcroRd32.exe
2924	AcroRd32.exe
2924	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0b0019c5b0d2759931c75c554a4f2bc0_NeikiAnalytics.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a0c43d852f1dea0d057f89dbf858e38c

SHA1
dacfd00bcdc52289b5992e3c76a174ac6b2aa279

SHA256
6df9e2a1ff873bfdf0670a5a8d87ed71bf8d37fce03a2951a96566db4f8e3cc8

SHA512
1657fa43fdc9c19403d9d6a78c7797ba1225e3801ee6a921db55127ecd45c9b4874f9c1b8cf78ac337590d39148aaaa2c085e563d1c223aafa3d5ba0f7c71afd

Download Submit