Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 03:21

General

  • Target

    15401571db7b7bd0c218d4525717fdc0_NeikiAnalytics.pdf

  • Size

    225KB

  • MD5

    15401571db7b7bd0c218d4525717fdc0

  • SHA1

    a836ab1596c76db81f57b1868a07403905a5fa23

  • SHA256

    a2514bf0b4a9514ca82e784baff0642832038e32d067478eae16a8f4b3397e50

  • SHA512

    68780bd2e928901dad207424b6a36440d09156b35a3224cb9ca11e3d45348bfe6772903645f6c70443133d5cf5b47bfd9b89d88d2c48e1a2217b8e97008df501

  • SSDEEP

    3072:SWP1VAxpzg8nIC3uuVws4/1VBXWepDj0q+BfWswCu5m3vz+uN1NtBlWu0H:S+AxpbnXzB+rHGbdJW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\15401571db7b7bd0c218d4525717fdc0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8a6f28fa908c14e3eae7a0ffca1f9d17

    SHA1

    142e00a60c66b5d474995d4faa01172cd60b5993

    SHA256

    036f7f14d01fd7240e1e5dc4da8b30a14cbb31ee6f03c5e887008f8d65dd5a58

    SHA512

    f13bde527e6285ff413e6ceaf53d9f7bc67895e1386bbb8e6fbdab1eb0b8a9b797e0f0c840a9e92af7e1e78bbbf4f2ae6f9b7b721211c08d8f290a95994eb17f