Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14/05/2024, 07:20
Behavioral task
behavioral1
Sample
a0d1ca82c43c3b919b83f34afe6ddb10_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a0d1ca82c43c3b919b83f34afe6ddb10_NeikiAnalytics.pdf
Resource
win10v2004-20240426-en
General
-
Target
a0d1ca82c43c3b919b83f34afe6ddb10_NeikiAnalytics.pdf
-
Size
33KB
-
MD5
a0d1ca82c43c3b919b83f34afe6ddb10
-
SHA1
087f169cf1305105f8f1caa745e3ba9d0a1d9196
-
SHA256
84eb943b8801867e5b65a2490bdc828a4773b256f4814c593967f6c255fd2f2f
-
SHA512
f9cef37c553a777e6787d4a95eadd4982c79ce475343570efca5fed05f67f762e57a6ffcdbdd16f48ed7d5cc6a3091b96b3691ee5e002fea829f66a31d0d1e3e
-
SSDEEP
768:2SIV1tdhSsGvoSBZ/spqy3RHzNnrfMFCBbk4A/yb7sPMGy:rasjdB8qMLMFAWab7sPMGy
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2020 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2020 AcroRd32.exe 2020 AcroRd32.exe 2020 AcroRd32.exe 2020 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a0d1ca82c43c3b919b83f34afe6ddb10_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2020
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5db14bd8e96a7a69f9eb2de974aec09e7
SHA1a15c8c029f8585f25a0f0630ff2fb2d8b95e6022
SHA256a4dec1f083a28f21a25658c4a3989670ae3b345ba047f1fc376dc4ee54ea8bcb
SHA5129b09c36b357e35ecd9ad3690b59b078fca4ee8ca811483418226609c4fb822d211c97b665eb0c093cb06340986af30cb95f843b5c16fbee85e4128200fc54607