Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
13/05/2024, 17:13
Behavioral task
behavioral1
Sample
bf4a691f7a7c34eb7c39ebebd20d7640_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf4a691f7a7c34eb7c39ebebd20d7640_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
bf4a691f7a7c34eb7c39ebebd20d7640_NeikiAnalytics.pdf
-
Size
100KB
-
MD5
bf4a691f7a7c34eb7c39ebebd20d7640
-
SHA1
2d495146a9a0e0f3336b4e95454b21545657ba9b
-
SHA256
898eef2b361e5948e41778f2c61fd437ef91b9ee588c6efc9fedd450aa083c5f
-
SHA512
64f26f39afe24c26c756bf0c458150dc2cbe72558045b28f125452235ea8d82d1155d7d7a068eea2909e46ccc7f2c71eccdc9d801c845561205e84484ba0c6da
-
SSDEEP
3072:JeOcJGORh8SrTyQFi/sajqbxqrzQqgvyG:JeaORh8EGQFaPGorMqgp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2172 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2172 AcroRd32.exe 2172 AcroRd32.exe 2172 AcroRd32.exe 2172 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bf4a691f7a7c34eb7c39ebebd20d7640_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2172
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5aac3e6fc25048803a326df31ba616d84
SHA150c6932abd5d1cd114fd940a87ff48469fe25073
SHA256f7554151c6d89b3f0f6a08609066e6e6c4277f83e4d9e91b26cfa538b30035c7
SHA51298cf7cdc58286358a1cc2ce2231ef84fee6ccd81bdd1e06e403084732c3a08781dfbcedfba4f642e4019aeeb8761aedb61b1732a9ea582d7ac93ad86deec7e91