Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15-05-2024 22:54
Behavioral task
behavioral1
Sample
4c7fca4687ecfc2118bbbbbbcf3497e0_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4c7fca4687ecfc2118bbbbbbcf3497e0_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
4c7fca4687ecfc2118bbbbbbcf3497e0_NeikiAnalytics.pdf
-
Size
2.2MB
-
MD5
4c7fca4687ecfc2118bbbbbbcf3497e0
-
SHA1
5e0cb886b94e2f0221e687df0ebf3646bd55515b
-
SHA256
3fb4868416e0d918e0cfc0be89df3f8e4ab21a88229fb72843156190d5ee3e16
-
SHA512
a75fc8842eff57ec3354df0065ff723852c399ec287ce459c31fda5ebdaaa88ee835f6354b43c974960835ef8f4539ab46ee71ac93699c750dbb81dd9c6a895d
-
SSDEEP
49152:anm6qPPRnGnkNyKUUMf377nRrHxoZwxKc+tCvyD0fDVtm7PvWFx4qw:fp0kkJPNiZwF+tCvyD0bwPvmw
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3000 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3000 AcroRd32.exe 3000 AcroRd32.exe 3000 AcroRd32.exe 3000 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4c7fca4687ecfc2118bbbbbbcf3497e0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3000
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d1fe455d268f54c4de4d3bcb3a58f619
SHA19d88d83ac4b859d706bd8fe2cc4de336fadc4e28
SHA2560a7cf46fdae42f2d447ad0d9ded2c89c5abb9b26e49e082827a081ad512afe4f
SHA512cc52aebb29e0ed0bd26fc0013496e2fef2dc0acb1b61895a046fc67aec99980e2975631f3a52323f6543de6d04594dcd556594f666f4e5609922cf576f33811f