Overview

overview

5

Static

static

5

602594871e...cs.pdf

windows7-x64

1

602594871e...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    602594871eaff7990d32336e4928eaf0_NeikiAnalytics.pdf

  • Size

    155KB

  • MD5

    602594871eaff7990d32336e4928eaf0

  • SHA1

    81315771ce381b51504f715d86483796bdce9e7b

  • SHA256

    30a9723114f177ff4093535eb43472ed3d0407c77e47d8be8fcf4fa41aaa7b32

  • SHA512

    8ff429e877857b613a0b927a89e592f29f06d1862fd24689c7d11eb9fdd10ba7c4892afc9728f2d5fa2d918bcdee8f4a33890a66ef287edcca15bf4c4826b1e8

  • SSDEEP

    3072:nbsi56CLq0VahjnvBmH7m7yjZmfuQ+oECH0ivLfi835X0O8djg9k:nbsXeKjnvB+mLfunoEQLfi83E

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\602594871eaff7990d32336e4928eaf0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    15c80543e8f63b93edded79d4e9f4025

    SHA1

    c653c3613abb9e0ae28f7cb0d95a874119c29503

    SHA256

    d28ece139934814e0882a188db8f260061ef89a9ead215fcf490764dee6c4d43

    SHA512

    6dca494adf8c608d25965e83c5e9fecf0895bd82358efe7b9e29457b609c3916d1bced2b9a8da3f110d932a55cccee9e7b964dd197b4c568bb29738df264c8ec

    Download Submit