Overview

overview

6

Static

static

6

348c41dc51...cs.pdf

windows7-x64

1

348c41dc51...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/05/2024, 20:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    348c41dc517ef186cb9ce369135162c0_NeikiAnalytics.pdf

  • Size

    529KB

  • MD5

    348c41dc517ef186cb9ce369135162c0

  • SHA1

    aaf7e0fa14458c8847e0fd006c1ca02527539867

  • SHA256

    39f4435fe44e8d13f3d3de5d567180c04d64cdde501b71475950fa381aafac90

  • SHA512

    02fe2459f113e768d8d494b2f32a19b659a637d9c4658940d82ad83512d426e3d921c6964bd8ac5b4868bdbc5c77bae0926766aae6944b41a6f1b8ef519be007

  • SSDEEP

    12288:GvkKqJAj9n33s6W8HF3rZ2arqJnei1Pa2lQZ5e5IWXo:ghqm3vPo1Pa2yeCW4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\348c41dc517ef186cb9ce369135162c0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5f9de5f1e38c14b0121216b7a9bcbf23

    SHA1

    e0703a85a53f583a92da9f54af7a9dd3411c07fd

    SHA256

    1aab74a0a5051d90f281ed4e3415b447cc42870d23b1dfa14f22a0b97536a03a

    SHA512

    2e8890bde26809965cbba782f97811351e474948edba93ec06a0600d5450959e68924675b922d714a1f364caf60548eb241658afbfdb459b5cb0f18bd04e8fb2

    Download Submit