Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 21:15

General

  • Target

    377cc5a321292d199fbd8d3fe9abb4a0_NeikiAnalytics.pdf

  • Size

    73KB

  • MD5

    377cc5a321292d199fbd8d3fe9abb4a0

  • SHA1

    9be18398b94aa99344e8ce56f5e724a31d200d4c

  • SHA256

    1b5fa158fc4b336754bc0d2b7cc012bc588b1d3e99d74cb26811a5af073cb76c

  • SHA512

    01b27c0ce2839f7c94b37c964ac389e93d65062ef0f1b8b165640dde6631b23a764acce042ff07a65baaf28144fda50ccbd8e35f03e6a9c8acbde98da6ef106c

  • SSDEEP

    1536:A795jBFXI6NN0W3WcKm3r6sqgw5E9SloHy8t5sEvHw:e5jBFXuW3WcKm32gOE9zS8zsEY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\377cc5a321292d199fbd8d3fe9abb4a0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          693e684e6a3bdedee30a7fdbb6d3c6ad

          SHA1

          24149cb4c0c1d45b33d5a13a192bd9a3243de2d3

          SHA256

          6b4fd79316a227f9d396b6ddcfdaa023a5c18cbb91f70c8960a26580ef926187

          SHA512

          021a8f0f65dafeaec21e0941b768b692b6f66b80c98cf91938184e2e4bf61009b221676ca9b181db41136633c06575102aee2b18648a27984d2437fc2a8777a3