Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13-05-2024 22:17
Behavioral task
behavioral1
Sample
2837befa880a29e59cb0888eea7e2870_NeikiAnalytics.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2837befa880a29e59cb0888eea7e2870_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
2837befa880a29e59cb0888eea7e2870_NeikiAnalytics.pdf
-
Size
34KB
-
MD5
2837befa880a29e59cb0888eea7e2870
-
SHA1
6f2b5f8f2ca200ff60da181289db58d3bc6406a1
-
SHA256
0bfaa31f4c50048cfc26b8f0638ca7d8a46f11f8692cc64921bc7d78b64043fd
-
SHA512
40a6715833847cdef94a50445528e6eb7f1b9ab83c84a96f11ef84bb033ef46eef283e3ab20abf96e548d2aa1a9834f3dd6637956d8bf8f07fe0592ffd9dee72
-
SSDEEP
768:clbzpt/Vsmn37M9u1xhPUfoAJl217SymxxFK:cdX/J3Q9Qvcfty17QHFK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2964 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2964 AcroRd32.exe 2964 AcroRd32.exe 2964 AcroRd32.exe 2964 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2837befa880a29e59cb0888eea7e2870_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2964
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57d6b22837af27f8679052c14e5e64af9
SHA135421f6215fcf117ab8e93585aee0673bc5c4644
SHA2566cd460f93895d5cb7d0123fcc7aa3cc72e0bbddbf8a05982481d41022379e724
SHA5121bc10b0059e6c1c0ae46688861d465d33f81f35e0f4a43edeb3e0241f1601d680aa59c61972c381c79b9d9ccfbc70ffb569513a5bc9bc4c11c22fe78b7f1e825