Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
14/05/2024, 03:35
Behavioral task
behavioral1
Sample
6ac0422f2cac1c843336a12418ac9b20_NeikiAnalytics.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6ac0422f2cac1c843336a12418ac9b20_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
6ac0422f2cac1c843336a12418ac9b20_NeikiAnalytics.pdf
-
Size
88KB
-
MD5
6ac0422f2cac1c843336a12418ac9b20
-
SHA1
14bce7fa01783626ec430a49344f4c4ca61ac7d7
-
SHA256
33b3fa35010e5f61ff020f343bd07dfa7692bef5f26c5b6a748ee3cb5ef387a0
-
SHA512
8d75a910e9026fe85473656c717784bb71e2e9dd2765680bb61bf9a0cc08bae6ce0a69ef699404fb2a72ec9dbeb570896acb90c56dbbcb808744768c9b0fddfb
-
SSDEEP
1536:y5e0JcqcJjSQ4KfRh8nSm7rmTyQF5cBQgAEGUVviaLO4Qier0IJg+A:WeOcJGORh8SrTyQFiQ1DUEaLO4QieJy9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 308 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 308 AcroRd32.exe 308 AcroRd32.exe 308 AcroRd32.exe 308 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6ac0422f2cac1c843336a12418ac9b20_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:308
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55b2a5a33d15c9be2633ac46aedca74b9
SHA1ff8e77205bec3741b4698b9fbec64213c251d332
SHA25660f1564e1c650623c33f4392a734aacef89f11dbd15cff3c724f5e307b2dad30
SHA512271c27cf404564a46a6cf030d2db3930e8608b3daa197c0f134c3821f3594612b39f395874c2565e63703dbf69d729c5bd0ea0e4ea39dbf519fedf9c0dcbfc73