Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
14/05/2024, 06:39
Behavioral task
behavioral1
Sample
96607f184aa976713fcec9234f72faf0_NeikiAnalytics.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
96607f184aa976713fcec9234f72faf0_NeikiAnalytics.pdf
Resource
win10v2004-20240226-en
General
-
Target
96607f184aa976713fcec9234f72faf0_NeikiAnalytics.pdf
-
Size
315KB
-
MD5
96607f184aa976713fcec9234f72faf0
-
SHA1
fcf99c5a0b6b5b60c915e20382c5a45ea8480dbf
-
SHA256
07c3f49ab39dbd4ecf9348616c3c16d935c63e822f72bc3fc06ab42b356287c1
-
SHA512
0df0eefc07153020ef4fd35ad0b639e803e06f18281b22e3c3a13789d466876689ed882f0283cd58878addecacf72a5ff9bdabe44bb3f411bb79cd0e414e3d1c
-
SSDEEP
6144:7SQcIaBwnR3M35sJd5G+bRiOUEt3N+JDvY:7SQcFindy+5G+9iOUEf+JY
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2888 AcroRd32.exe 2888 AcroRd32.exe 2888 AcroRd32.exe 2888 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\96607f184aa976713fcec9234f72faf0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2888
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f89ac5a613a5c3104c4ec4d9b539fbec
SHA127e439630bc936603050d2b57cb3aefe03890df6
SHA256ea4c3d0db12de84c7c1314b43de82f9f1d88247fc670596760b31b0b705074a4
SHA512248f49add8fa25d2323b434a8aa8203b23e0ff8a8f2ccc8684950d391d046b237810dc59ac95c367a3afc51779e29f56526c9eb90b25e489d7ea2ebeadda5e80