Analysis

  • max time kernel
    120s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 15:58

General

  • Target

    e40b3a376270463aded4c897d32c7840_NeikiAnalytics.pdf

  • Size

    74KB

  • MD5

    e40b3a376270463aded4c897d32c7840

  • SHA1

    b418fe46301111df1681bce10ff45775a05935e8

  • SHA256

    dc24ed98efcda86d8ede647b8e12b4741bd56d5536e0a7e1af2ca08478e4b3dd

  • SHA512

    6f376224338d0af716b7b3d1460d35f148f3d0cf209b055bc1b767e3073009e379bc7663dd650cf12694172fa9ad7beb399db628d44d282976b5de123d48eea3

  • SSDEEP

    1536:wx5Cx9ZJLUVNyMVZfb9uo6xuqt6+BnpUUujhg8vU49V:OCx1UDRzj9uJfLlirVgVkV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e40b3a376270463aded4c897d32c7840_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1612

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f376894171af3b305511bbce8b7a7407

          SHA1

          2f939cf864dceb9bf9333b0e3c9f7d64e157cd14

          SHA256

          034de22ac1a51763b6f600c70212a0ea59e2bd763e822d38320bb540c414ddae

          SHA512

          68a8ad6a4e7781620926abf05d83c4889048f8f35829db8e5e86418ae4f3279e3c4d3c13e4920b0ba264be6d9bdf19fbee7b3d36430e3c9481bab9e683e435e5