Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 03:38

General

  • Target

    8edab46684dfe76dd549a0a35e2c1980_NeikiAnalytics.pdf

  • Size

    381KB

  • MD5

    8edab46684dfe76dd549a0a35e2c1980

  • SHA1

    927a5e074dc7dca1aec3be1cb9dcaf3a8784ec37

  • SHA256

    35c0722fb2c89c621441ec13b7b4aae93e057e13d112bd7239b895b52d85e936

  • SHA512

    bb4254aab51dbf374287b2ce1fa291f1f224ff79c7d64dd8f0fc074fede83d4f4e4c9dd6db8c38b9c4c5026418def5348d228ba055626cb37453ce06b061e039

  • SSDEEP

    6144:jj15KbiXod66ynJpbwzdnPRKIdZWHiRlw+VDXwJ+EdX0uCc9jJQ/lZ:jj4i4d5iJhwB55dZWHulw+VDVOUlZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8edab46684dfe76dd549a0a35e2c1980_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2116

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b9b2da17320f25ef6529dd5483f9f0fc

          SHA1

          e71479bf9b788c7a4868d7869fb3c23d43b39ccd

          SHA256

          34a7758bf2b6d3aa1f433f599196b541acddbd4dc0f5c46dea29dfb404056f32

          SHA512

          98b2a35bb1ede3fc96c008b7db0f06d5449b694631cfa1b65b750d6029b47f9eea217dd959a96e6bf980bdfbba5cfd5c8e1d635db128277d373dd2ae0927b97e