Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
14-05-2024 06:53
Static task
static1
Behavioral task
behavioral1
Sample
99eee614c29de96939d12b37fea57b20_NeikiAnalytics.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
99eee614c29de96939d12b37fea57b20_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
99eee614c29de96939d12b37fea57b20_NeikiAnalytics.pdf
-
Size
60KB
-
MD5
99eee614c29de96939d12b37fea57b20
-
SHA1
5227cdf8a42698acaa21cdb8275229ca064ecf84
-
SHA256
5ab2a8277c3a611c8eaa46c50137c2dd728bc57f81451c29ea1b2e8a37aaa4a8
-
SHA512
99d8839492b02b44b581c6ad1658c623651e57ef876764cd3f40fac2e79ea8f9722b974c01d43007516f05923b845d9994a57a614b183ea50482af538121ad01
-
SSDEEP
1536:3dCHnnJRw4uhTDzQ1k65UUOhlTWg3IVRMPu6mad:wPgz65UUcliV2h
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1856 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1856 AcroRd32.exe 1856 AcroRd32.exe 1856 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\99eee614c29de96939d12b37fea57b20_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1856
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53f7d2a3785a10ffb36e96ba8a3f6ccfd
SHA1caf1f00aade6898e6ac1fdd9e5c25bfecbc19e67
SHA256d51fb99a212773ac3a18f61f16819785d953b24b6a7cdd06d3bcd0e2665ebcb1
SHA51201544f771563308ffcb062ee74781363b2bb980a1311c193ed5ef484b32de01913d276351162ce17afe520dc47f4b42d6158d27358b72ab2ec52500e2da629e3