Overview

overview

1

Static

static

1

b8318bd0a2...cs.pdf

windows7-x64

1

b8318bd0a2...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 09:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    b8318bd0a25a2823e67fb8c065f5e3f0_NeikiAnalytics.pdf

  • Size

    140KB

  • MD5

    b8318bd0a25a2823e67fb8c065f5e3f0

  • SHA1

    d69d9a9fc63fa27647b956c83000ad5a973c3f6c

  • SHA256

    0a199551a146335c6b3ebd427601588c21b07e10e4fe1f4fe85aa9c270f506da

  • SHA512

    f82283bbffe7b05b2b1d0c68cddd672b71cd2507c883a8e703cdc9b3c488c15a96b9242dc5d2b72d8f50827c9d62c48c703c71b7f6a1a7ffdb0102991d33aa81

  • SSDEEP

    3072:su9mHI3Rn8wrrWR1skB4JqnRwWNjAHJ1DwWz1R+4YlsYda8af:lt8wPMB4JqGWsJ9w8+XsnZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b8318bd0a25a2823e67fb8c065f5e3f0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2700

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          0de6d0e74e3370b02b64fef3692a3af3

          SHA1

          8fa27a3b842e94287d93d044572f07b6600df181

          SHA256

          41f8061ce92323c6e1368f8986ae29ea81e00a5c8561a914d2c6edc37a7f1a44

          SHA512

          7d47207f677108a684ef083ebba67a0923db4c2db8196cac344dd5c0ee03aa9721ddd079c5398f087a8e0e0203ecaba7ed294019ce40fa256363b25a1f5afe48

          Download Submit