Overview

overview

6

Static

static

6

55c093b165...cs.pdf

windows7-x64

1

55c093b165...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    19-05-2024 23:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    55c093b16527fec6a4fc8e17affa81d0_NeikiAnalytics.pdf

  • Size

    369KB

  • MD5

    55c093b16527fec6a4fc8e17affa81d0

  • SHA1

    9b251b35c5ad29f201f2ef6b360788fe7464bc62

  • SHA256

    79fee12576d79b34407e9d32956f01b8558049084631c02cfe7fe308a050e5e2

  • SHA512

    c165130867af1c37ae0451cb67a889b607b2022cd41ac19d769cfe7e49259b095a6049fb9831c3ce85b048feb6b3dc4140cd5677a4a3e2e4a1b25553ddfb0e73

  • SSDEEP

    6144:M9cCOLxFm7fK4/QqdJlr7UqkmoLp3Pm9m65MvY5H0I4m91h+eMnnp:QcZsTKqbdJlXUqjol3Y5Q9I3FWnnp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\55c093b16527fec6a4fc8e17affa81d0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    65a58aee47a6b2299adb72c40278bff2

    SHA1

    41b4b208585f9fc1ff506454bd2f930002b11e1b

    SHA256

    5c90ba4cba6a6c8576a4cefae8538d72de4ddfffb3e0fd4a8ee72848ef9b59c0

    SHA512

    5432a90f9e1e81a47a07b13a0d889abbb737b89683eb99d75e84cecc610d94ec16369dddf8d7e08ced3dcedc3e197a2fea01e0fff26937a41cd24d519970bc50

    Download Submit