Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 07:25

General

  • Target

    ce62bd1145647d61a30d1791f46db410_NeikiAnalytics.pdf

  • Size

    86KB

  • MD5

    ce62bd1145647d61a30d1791f46db410

  • SHA1

    234710915fc2241ccb204915dbf3c2467138950e

  • SHA256

    6f362b63cbf09b06df7e86e35054ff6241260d03b7d27dee2d0c2706565597c3

  • SHA512

    8af228f6c180d49e7add9febd11be31efc0f4a7f0bb38ef073c076629232110b7548ef2ccb6ce910fab5b53c9b943c068b82d14031db7a950c57290de334ffe1

  • SSDEEP

    1536:k5e0JcqcJjSQ4KfRh8nSm7rmTyQF5cBnwlr8lhizEbLqBhAOwxK:geOcJGORh8SrTyQFinwlrseYGBqOYK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ce62bd1145647d61a30d1791f46db410_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1876

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          740fe00eca3eea21b00a328f2bcdccc3

          SHA1

          286c7269564fd71437c62a424249a2708465e6f7

          SHA256

          5bd6ab4277cf33f1a6cbb440b4cb0f450acc4fdfff974fa7a4f99cd0f8fe0e70

          SHA512

          161b1bea3d75ba2bb1955ead86ab17868a7b092e3e8ea445364757d37a5fcc6bf9e75a6eef8242b0a40df5468ecfae47f250da7fb2df294a4f964007894dd530