Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 03:35

General

  • Target

    6ac0422f2cac1c843336a12418ac9b20_NeikiAnalytics.pdf

  • Size

    88KB

  • MD5

    6ac0422f2cac1c843336a12418ac9b20

  • SHA1

    14bce7fa01783626ec430a49344f4c4ca61ac7d7

  • SHA256

    33b3fa35010e5f61ff020f343bd07dfa7692bef5f26c5b6a748ee3cb5ef387a0

  • SHA512

    8d75a910e9026fe85473656c717784bb71e2e9dd2765680bb61bf9a0cc08bae6ce0a69ef699404fb2a72ec9dbeb570896acb90c56dbbcb808744768c9b0fddfb

  • SSDEEP

    1536:y5e0JcqcJjSQ4KfRh8nSm7rmTyQF5cBQgAEGUVviaLO4Qier0IJg+A:WeOcJGORh8SrTyQFiQ1DUEaLO4QieJy9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6ac0422f2cac1c843336a12418ac9b20_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:308

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5b2a5a33d15c9be2633ac46aedca74b9

          SHA1

          ff8e77205bec3741b4698b9fbec64213c251d332

          SHA256

          60f1564e1c650623c33f4392a734aacef89f11dbd15cff3c724f5e307b2dad30

          SHA512

          271c27cf404564a46a6cf030d2db3930e8608b3daa197c0f134c3821f3594612b39f395874c2565e63703dbf69d729c5bd0ea0e4ea39dbf519fedf9c0dcbfc73