Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 03:38

General

  • Target

    8edf902b5054c9434867bbf6799530b0_NeikiAnalytics.pdf

  • Size

    80KB

  • MD5

    8edf902b5054c9434867bbf6799530b0

  • SHA1

    8e86b3523ad54894786a81482eaaa2deb1a78803

  • SHA256

    4b52d97bc8a7566c206d40135e0c0219c5b9ffe74834b013f3cd0e36617506ab

  • SHA512

    cd7f4a81d0a1bd602ed7d4fac80c2f5d552f3ce19cde6b18f177d98dad76002269670fbc90605005e16aa65d34f9d19000065c98601639c5717cf7e61979f2f2

  • SSDEEP

    1536:Z18OLpUY1ootxpHdDLT6RilIX/8PnG9vuTz/jj1RmwiIxWUgqu22lEC8bOC:IOLWlw79DLuRilIX0Phz/TiIcUgS2lEv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8edf902b5054c9434867bbf6799530b0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1776

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          cdfb70285f713967f6adedb6c62156a0

          SHA1

          fe816a3f1fbf7bd72f3fec26b483ce22352d94d2

          SHA256

          c80fc7dd3d0d9f5dc0195d9faf68f68d350bd366d086d89f25111bd7d200cfd2

          SHA512

          56f2f89f3a449500ab44a5a3a586317eab067e5a8916eb4ab40fd3463fef85e2e04632a4ffca1df5d161c760b971d8bb94ab53ec6f95d74046fdb7a15e6b2b94