Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 02:06

General

  • Target

    744f970f8115803722b54e36da3367d0_NeikiAnalytics.pdf

  • Size

    307KB

  • MD5

    744f970f8115803722b54e36da3367d0

  • SHA1

    aa33fd40da8b490a2b0c255ebb0a398f91260f4b

  • SHA256

    4efbac0425eecbf7ffb59e4ccc0d9554a6ce74a1324f0450449676bd4d1b825c

  • SHA512

    f6aae2c89982b513ddb2787bb6349580cb5f3988c8bde0985df2f4caeeb869d125e46a1287222c43be30574844b5ff31960d1f19511a118ec58af3969769ec96

  • SSDEEP

    6144:Zq3dJEEmAs8ZGFC4dWWifXCew/4CuHzSzQ73tGYq2ix5+Zrxn7gpYPQhRri5tS/:0NJEEmLEGFC0ivvA9z8NvaK5W+aRW0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\744f970f8115803722b54e36da3367d0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    affcad21342f6827694a7664a7cb2778

    SHA1

    44663056ce5c2fd1bc7ddd0b03946bde9e1e272e

    SHA256

    92f245a51c7b5c7b26974e2898afd729f722fea35267e39f2e8e40885717e927

    SHA512

    224a5f461c33115db71a9ff7e7b9ac4bd79f48c19391477de7cb353672ab8334136acb29bdff7f2b2377adc53c25f8c9ba0d3e61f08f67a97f0b7d6ccd45b23c