Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/05/2024, 14:35
Behavioral task
behavioral1
Sample
e23ea8fb1550cbae778c9b8ca90018f0_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e23ea8fb1550cbae778c9b8ca90018f0_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
e23ea8fb1550cbae778c9b8ca90018f0_NeikiAnalytics.pdf
-
Size
83KB
-
MD5
e23ea8fb1550cbae778c9b8ca90018f0
-
SHA1
8a7e191835bf7e4005fc28022aea7a1c173a63ef
-
SHA256
f4ec6d0d87a2fd6848f283aa4b248792be5a89a8e4062e0ae75111502e4e3c5e
-
SHA512
591ddb14838c1cf1ab6fd50f13dbb7a0c08c4dbd7d82966703c8eb34277ae7bdf45adc691c27c62415985bbd00022dfc642afb998fbe6fcf562691e35b4c86d1
-
SSDEEP
1536:k5e0JcqcJjSQ4KfRh8nSm7rmTyQF5cB7sehpsZy5Se8UGaoHTVzlCwg6wp/Qb:geOcJGORh8SrTyQFi7hMZy6zlwwgj9Qb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2180 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2180 AcroRd32.exe 2180 AcroRd32.exe 2180 AcroRd32.exe 2180 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e23ea8fb1550cbae778c9b8ca90018f0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2180
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD561742be393b3b7002b9a8d65908fbfe0
SHA1e0bb9726c91e1bc053bfbba02672a162363e1e24
SHA256395a6e12e53d44843d53b09cbdd0d409b1eebd59a76f207112f3fb3a348a9b21
SHA51292b5ce4e7846635479693f0bdc28289adb6e258637731647c4c4af8273e0e0b3e9c9574584bcb01655221995f2e41818b3c73c0fb38327fd7deb660b20da6db1