Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:52

General

  • Target

    663d022cc0dd65f8e510595b8273e8e0_NeikiAnalytics.pdf

  • Size

    427KB

  • MD5

    663d022cc0dd65f8e510595b8273e8e0

  • SHA1

    1ff0827e2ff06798cbc66d35c9ef8eaccd88dd9a

  • SHA256

    888eb8a0095cb22730b35e51356a45512b4d8b4cdd91f36fdeacabde7c7cd2be

  • SHA512

    cfd5bce0f1030f7a432d38c4de9de564e1fd62791ad97ffee91b477866e498ee1c976879c7e117b143c537636862a4d53bcecb64d87cf413040f8071a0cc4266

  • SSDEEP

    12288:pyTFQ9vikGFVqvm6ZgZNUx49dfGZpfeTb:py+99GFVqeJNUx4IpmTb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\663d022cc0dd65f8e510595b8273e8e0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    7e24ab714ea5124c237c021a8aa473b8

    SHA1

    395e6156c6864002c8af2f672969cacc02a68e59

    SHA256

    701ed2fee52f3cd0c69943102e1e8d7c03bf86a210de1d66bf4add724252c62d

    SHA512

    b83848fedf3eb552991d95934d660b18d0f324a9fe514ad69f005914f5e3a6638b0bf00925db8b4948c9cf8267432392e10efb67c9742b1cf62c568d7f6f501c