Overview

overview

6

Static

static

6

8046bb0083...cs.pdf

windows7-x64

1

8046bb0083...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15-05-2024 04:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8046bb0083c43b1ed5ba67a71424c7b0_NeikiAnalytics.pdf

  • Size

    407KB

  • MD5

    8046bb0083c43b1ed5ba67a71424c7b0

  • SHA1

    48ecf7835c04fea4fbb53c6f9993d776bd4a1225

  • SHA256

    12a53ddfd302686250b98227bf68c1d23d4048bb3e0e6c2679e708a23499eea1

  • SHA512

    0fca730fef3bdb29ea6b76c5088d2a6b92253d7195ad286cf70fc74d3117c738640c1e6fde3160791c8f33c5b8571ec0201d3cca2df21d84eab820030f52b816

  • SSDEEP

    6144:snU8AT3rqBVv8xNufM/LCiUt3lpxEESbHS6scOzD2gojNxRgsRD5rg:F8s7qBuxN9LC9BlpSEIOzD2njNxRnRe

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8046bb0083c43b1ed5ba67a71424c7b0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    19eeae8b25d1bfca97b02668550565f2

    SHA1

    c8c68451aaac497e714cc96ea1c65d6f5aa07dc4

    SHA256

    4be9ee7dcb2012651b290e970b62f4cda1dc9f92f86458b82cb6d1b4c6b54778

    SHA512

    674b87346a5b79ea66a7ad5b4fb49be8c6038577a252cf3b0d1f373147c53138e0de2a253d429b792b87ead7d5b43f781cc746842417105eb9a9519b7f9500e1

    Download Submit