Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 06:39

General

  • Target

    96607f184aa976713fcec9234f72faf0_NeikiAnalytics.pdf

  • Size

    315KB

  • MD5

    96607f184aa976713fcec9234f72faf0

  • SHA1

    fcf99c5a0b6b5b60c915e20382c5a45ea8480dbf

  • SHA256

    07c3f49ab39dbd4ecf9348616c3c16d935c63e822f72bc3fc06ab42b356287c1

  • SHA512

    0df0eefc07153020ef4fd35ad0b639e803e06f18281b22e3c3a13789d466876689ed882f0283cd58878addecacf72a5ff9bdabe44bb3f411bb79cd0e414e3d1c

  • SSDEEP

    6144:7SQcIaBwnR3M35sJd5G+bRiOUEt3N+JDvY:7SQcFindy+5G+9iOUEf+JY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\96607f184aa976713fcec9234f72faf0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f89ac5a613a5c3104c4ec4d9b539fbec

    SHA1

    27e439630bc936603050d2b57cb3aefe03890df6

    SHA256

    ea4c3d0db12de84c7c1314b43de82f9f1d88247fc670596760b31b0b705074a4

    SHA512

    248f49add8fa25d2323b434a8aa8203b23e0ff8a8f2ccc8684950d391d046b237810dc59ac95c367a3afc51779e29f56526c9eb90b25e489d7ea2ebeadda5e80