Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 03:21
Behavioral task
behavioral1
Sample
15401571db7b7bd0c218d4525717fdc0_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15401571db7b7bd0c218d4525717fdc0_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
15401571db7b7bd0c218d4525717fdc0_NeikiAnalytics.pdf
-
Size
225KB
-
MD5
15401571db7b7bd0c218d4525717fdc0
-
SHA1
a836ab1596c76db81f57b1868a07403905a5fa23
-
SHA256
a2514bf0b4a9514ca82e784baff0642832038e32d067478eae16a8f4b3397e50
-
SHA512
68780bd2e928901dad207424b6a36440d09156b35a3224cb9ca11e3d45348bfe6772903645f6c70443133d5cf5b47bfd9b89d88d2c48e1a2217b8e97008df501
-
SSDEEP
3072:SWP1VAxpzg8nIC3uuVws4/1VBXWepDj0q+BfWswCu5m3vz+uN1NtBlWu0H:S+AxpbnXzB+rHGbdJW
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1964 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1964 AcroRd32.exe 1964 AcroRd32.exe 1964 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\15401571db7b7bd0c218d4525717fdc0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1964
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58a6f28fa908c14e3eae7a0ffca1f9d17
SHA1142e00a60c66b5d474995d4faa01172cd60b5993
SHA256036f7f14d01fd7240e1e5dc4da8b30a14cbb31ee6f03c5e887008f8d65dd5a58
SHA512f13bde527e6285ff413e6ceaf53d9f7bc67895e1386bbb8e6fbdab1eb0b8a9b797e0f0c840a9e92af7e1e78bbbf4f2ae6f9b7b721211c08d8f290a95994eb17f