Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 07:20

General

  • Target

    a0d1ca82c43c3b919b83f34afe6ddb10_NeikiAnalytics.pdf

  • Size

    33KB

  • MD5

    a0d1ca82c43c3b919b83f34afe6ddb10

  • SHA1

    087f169cf1305105f8f1caa745e3ba9d0a1d9196

  • SHA256

    84eb943b8801867e5b65a2490bdc828a4773b256f4814c593967f6c255fd2f2f

  • SHA512

    f9cef37c553a777e6787d4a95eadd4982c79ce475343570efca5fed05f67f762e57a6ffcdbdd16f48ed7d5cc6a3091b96b3691ee5e002fea829f66a31d0d1e3e

  • SSDEEP

    768:2SIV1tdhSsGvoSBZ/spqy3RHzNnrfMFCBbk4A/yb7sPMGy:rasjdB8qMLMFAWab7sPMGy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a0d1ca82c43c3b919b83f34afe6ddb10_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    db14bd8e96a7a69f9eb2de974aec09e7

    SHA1

    a15c8c029f8585f25a0f0630ff2fb2d8b95e6022

    SHA256

    a4dec1f083a28f21a25658c4a3989670ae3b345ba047f1fc376dc4ee54ea8bcb

    SHA512

    9b09c36b357e35ecd9ad3690b59b078fca4ee8ca811483418226609c4fb822d211c97b665eb0c093cb06340986af30cb95f843b5c16fbee85e4128200fc54607