Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13/05/2024, 07:27
Static task
static1
Behavioral task
behavioral1
Sample
a5b62b370377e46ede064c75c5898b10_NeikiAnalytics.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a5b62b370377e46ede064c75c5898b10_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
a5b62b370377e46ede064c75c5898b10_NeikiAnalytics.pdf
-
Size
391KB
-
MD5
a5b62b370377e46ede064c75c5898b10
-
SHA1
85fdc3c9df2747199982760e5e8ae4ff9d0ac965
-
SHA256
9ff8ab07497c815a9607f1036373db10c9279748e207a70cd0ffdb7def187015
-
SHA512
38db938c49d0b0c005a19f67c2d3e261006cb03c738de5020a455635b727f11ae2200c886a43b781489c2f33d33e279badc2da3816f7d4c194d24ce5b873cf2c
-
SSDEEP
12288:qNYcfhv2SQxGRItmwNNRahujrCiIhUfQNd6X:qNY6XuZN3mN+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2984 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2984 AcroRd32.exe 2984 AcroRd32.exe 2984 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a5b62b370377e46ede064c75c5898b10_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2984
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b736dcab5751cd492545cbd8dee104aa
SHA17543ad6c9006107a8c93db5ff62869484464a86b
SHA2562ed0c7fc0e8948648e460b6e5568fb08dd8cca26e73e974ffb9a7bb22c981af3
SHA512507d6e1570e95ae8bc203a8eb6de7991f4c34ac9817c5b9fc6abe857944e32aa1d9cb2ef40fb72a9f2cecec8ffb8db69387a8e1d18264b6b957a330c970c439a