Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 00:52
Behavioral task
behavioral1
Sample
663d022cc0dd65f8e510595b8273e8e0_NeikiAnalytics.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
663d022cc0dd65f8e510595b8273e8e0_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
663d022cc0dd65f8e510595b8273e8e0_NeikiAnalytics.pdf
-
Size
427KB
-
MD5
663d022cc0dd65f8e510595b8273e8e0
-
SHA1
1ff0827e2ff06798cbc66d35c9ef8eaccd88dd9a
-
SHA256
888eb8a0095cb22730b35e51356a45512b4d8b4cdd91f36fdeacabde7c7cd2be
-
SHA512
cfd5bce0f1030f7a432d38c4de9de564e1fd62791ad97ffee91b477866e498ee1c976879c7e117b143c537636862a4d53bcecb64d87cf413040f8071a0cc4266
-
SSDEEP
12288:pyTFQ9vikGFVqvm6ZgZNUx49dfGZpfeTb:py+99GFVqeJNUx4IpmTb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2748 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2748 AcroRd32.exe 2748 AcroRd32.exe 2748 AcroRd32.exe 2748 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\663d022cc0dd65f8e510595b8273e8e0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2748
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57e24ab714ea5124c237c021a8aa473b8
SHA1395e6156c6864002c8af2f672969cacc02a68e59
SHA256701ed2fee52f3cd0c69943102e1e8d7c03bf86a210de1d66bf4add724252c62d
SHA512b83848fedf3eb552991d95934d660b18d0f324a9fe514ad69f005914f5e3a6638b0bf00925db8b4948c9cf8267432392e10efb67c9742b1cf62c568d7f6f501c