Overview

overview

3

Static

static

3

8f58988350...cs.pdf

windows7-x64

1

8f58988350...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    17-05-2024 02:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8f58988350fadb7894f6a4608e8d8da0_NeikiAnalytics.pdf

  • Size

    113KB

  • MD5

    8f58988350fadb7894f6a4608e8d8da0

  • SHA1

    5bcdc86ddbd1007e657b27ca6be817e940e9f5e0

  • SHA256

    5cfc0f6b8bba7999f8657efa7bc1397b853ac9e9bbae005e49b2455785f15d27

  • SHA512

    8a7408c36080d89d903547e639a23c090e04caa554d4b5b11fba719be38b735549ffb9c55974ac70946b07a4bb4f1d98abe41e075adc6d596275fd67f2f49d2b

  • SSDEEP

    3072:Vg39nFV2FMuU45siYHd4S1bVEsLqRTqAVtqpp32M:IdFV2VNAqC51qqQtq32M

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8f58988350fadb7894f6a4608e8d8da0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d99287f2f694ae21d537bfd464ea2edf

    SHA1

    e6da06c3c2a9e029cfc428f25e8aadd8aaab4248

    SHA256

    9366f0372eb69b234907eb951a758da384fd96d65739e6b5a9fcae3ede2f7f1b

    SHA512

    f36dfb8ba8c66927b7e98ebea9ae3d9e2c524991378dbb2b32a516ffaa4731cc5053b67fd7e41689765d4bf98d5e00c8b09a103beffde0d96ec9552a0b5ac6e3

    Download Submit