Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
17/05/2024, 07:25
Behavioral task
behavioral1
Sample
ce62bd1145647d61a30d1791f46db410_NeikiAnalytics.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
ce62bd1145647d61a30d1791f46db410_NeikiAnalytics.pdf
Resource
win10v2004-20240426-en
General
-
Target
ce62bd1145647d61a30d1791f46db410_NeikiAnalytics.pdf
-
Size
86KB
-
MD5
ce62bd1145647d61a30d1791f46db410
-
SHA1
234710915fc2241ccb204915dbf3c2467138950e
-
SHA256
6f362b63cbf09b06df7e86e35054ff6241260d03b7d27dee2d0c2706565597c3
-
SHA512
8af228f6c180d49e7add9febd11be31efc0f4a7f0bb38ef073c076629232110b7548ef2ccb6ce910fab5b53c9b943c068b82d14031db7a950c57290de334ffe1
-
SSDEEP
1536:k5e0JcqcJjSQ4KfRh8nSm7rmTyQF5cBnwlr8lhizEbLqBhAOwxK:geOcJGORh8SrTyQFinwlrseYGBqOYK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1876 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1876 AcroRd32.exe 1876 AcroRd32.exe 1876 AcroRd32.exe 1876 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ce62bd1145647d61a30d1791f46db410_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1876
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5740fe00eca3eea21b00a328f2bcdccc3
SHA1286c7269564fd71437c62a424249a2708465e6f7
SHA2565bd6ab4277cf33f1a6cbb440b4cb0f450acc4fdfff974fa7a4f99cd0f8fe0e70
SHA512161b1bea3d75ba2bb1955ead86ab17868a7b092e3e8ea445364757d37a5fcc6bf9e75a6eef8242b0a40df5468ecfae47f250da7fb2df294a4f964007894dd530