Overview

overview

3

Static

static

3

b60758b791...cs.pdf

windows7-x64

1

b60758b791...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15-05-2024 09:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b60758b79187751123a27a49896f1620_NeikiAnalytics.pdf

  • Size

    40KB

  • MD5

    b60758b79187751123a27a49896f1620

  • SHA1

    0ce678bb92b0f1b7886d020321e612c44754cc10

  • SHA256

    c53d46c63789718b97f7570d3b1ee8655476962afde7c2b5917137e07105bb74

  • SHA512

    73d92a79952d1dac6a6b95bd37946f24f3aa2f69228babda5ae2d9a52fca32a002a0ddb5f2f59533f57c45393e231df0558bb7a81f1a0daa1df37665fb6dd26c

  • SSDEEP

    768:iEgZ4X47WDV5r3m6VLtVZ9cVJ0D4/MN1AyZOG1xtbU3U66JCskLbOFPswvLe:tCe1iJh/FiOGDxU3TSCsxE6Le

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b60758b79187751123a27a49896f1620_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2256

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f1a8e0bacd0b126a19210d5ffffaae75

    SHA1

    cfe6e7720751e2c5942608e62dfaa815e94f0b6e

    SHA256

    4a27a55f4a97d811397651024989dc08f3ff9998a25e37cfbeebb1741c269849

    SHA512

    8e1880ecd58df91ba11fbce781e71094cc5b9ce109988861e882544fad60b411ec625041c846d95b9c376e6048aeab3fbe04b353720523c010d75d3858449972

    Download Submit