Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 17:18

General

  • Target

    e68c5646b1cb09c8a66cdbabf3575830_NeikiAnalytics.pdf

  • Size

    311KB

  • MD5

    e68c5646b1cb09c8a66cdbabf3575830

  • SHA1

    760bd4aa4fc8fa9d961ff9ae328c8425d81133bb

  • SHA256

    ba91c7cfdceb6d368debca0bb8914929044a745e786df69b54f21c940f241857

  • SHA512

    6ab1c8ca686cbf3f0db55064e52034a92f62441892affd470eb172aafcb034a71f399833ac9e81c8f267acfcea9614ba78e0a17cf2cb9c5e9a04a2e1678f85a0

  • SSDEEP

    6144:B6j5J3wZN+gYbuVq083xO+jfGpnIlZhkKowwYMOtlsaXOjZ6HJuWCHSi9P:YjH3wrOGehOUGYWKow9tlsaXOuJ9CHJh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e68c5646b1cb09c8a66cdbabf3575830_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2980

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ab6e8815641e80a01d4384b0b23e6d6b

          SHA1

          769125a29d66f9bf0384d28dfeaba07e0781b075

          SHA256

          e287bffc5bffcaa7e9bb4b1473b2933cd303f30fb0a6bcc3ae280311c2ed5dfd

          SHA512

          00754969bc67232846dcae773b99f91d24311fc7637eb55330f27a46b48c4ec08d7c92288646d2715021c5c6a60d82b9d2b7749360d16e6d9ec4ccf8aaeefcf5