Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 11:58

General

  • Target

    d0e47da2c373916afbb15b44ce7759b0_NeikiAnalytics.pdf

  • Size

    275KB

  • MD5

    d0e47da2c373916afbb15b44ce7759b0

  • SHA1

    96b9cc48b53ed49de436cf73e6b5bc94f4e6fd20

  • SHA256

    f90bf819e63963da69533e227db0f7dab7520b9c0dc4c1a7e151ab15e4121e9a

  • SHA512

    bdfe1cbdb6324d883593ea3b9a66c8d95c9814a12794b97f5ac948981e72faa9a3961705d7e914017a4ae757d38505c4eb9c4559cf77fc0b9b583c75c0319afb

  • SSDEEP

    6144:5X23ljuQVs975+dmgXBBpRdsCo2t69uqjQTd2J6DJZ81m:k1uQVsJydpRKCou69uHI6DI4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d0e47da2c373916afbb15b44ce7759b0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e6357dd2f8d767016d7cff31f156ed82

          SHA1

          489731ad077a7528b6426a13785d8147b55c5079

          SHA256

          8973acb28944ef4c12fe88034da3d11cd62969b275b1cfd744d19ea3c5e828ac

          SHA512

          1dde09bd5bcdef9da7387e94183062160b437058117e8ba1e80f19f36f172f3d1c418f3b10c6b7ce8cd522e293b667c0b20427bf386d9913ba23c4290f3f9491