Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 06:45

General

  • Target

    7901a0b3385b64317ea3872e03398b90_NeikiAnalytics.pdf

  • Size

    238KB

  • MD5

    7901a0b3385b64317ea3872e03398b90

  • SHA1

    2b057f01145914651cb3bb16a31922dc949a06c0

  • SHA256

    109fbb798a2188c5a7c7fee6cf345ba4c6bb2f2a89db5de19ff7abb740e52ef2

  • SHA512

    72af67d616f0ab8bd76c3f9fe081c1f6543ab35f1e5177b14078a03ddc727ca66ada32b087370a944d9f2ca3e3695f5ce1e7949defc37c52fc3091dd0845a257

  • SSDEEP

    6144:tee9FGRjEaUd5RPhi9+v4k8FgH1ood2SoXyX0ZGu:0evG2d5RPhi9+v4kFH1DWXwlu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7901a0b3385b64317ea3872e03398b90_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          387220c23aceca035cf409183ad7afa2

          SHA1

          f3543b9937191402ff840603cb5eab8d4cd8264c

          SHA256

          8e57cd126c8092439f4c941a20ec153d1a6bc15dc05857e57535bc3b3f8f0015

          SHA512

          5402474109474a46da5693e4a302f2bf9346768f50863d181b65a018347cccce07da28b45fab4337cb4c4e26678dc9431df1cee4425da027f153aebbd26f1a36