Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 02:06
Behavioral task
behavioral1
Sample
744f970f8115803722b54e36da3367d0_NeikiAnalytics.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
744f970f8115803722b54e36da3367d0_NeikiAnalytics.pdf
Resource
win10v2004-20240226-en
General
-
Target
744f970f8115803722b54e36da3367d0_NeikiAnalytics.pdf
-
Size
307KB
-
MD5
744f970f8115803722b54e36da3367d0
-
SHA1
aa33fd40da8b490a2b0c255ebb0a398f91260f4b
-
SHA256
4efbac0425eecbf7ffb59e4ccc0d9554a6ce74a1324f0450449676bd4d1b825c
-
SHA512
f6aae2c89982b513ddb2787bb6349580cb5f3988c8bde0985df2f4caeeb869d125e46a1287222c43be30574844b5ff31960d1f19511a118ec58af3969769ec96
-
SSDEEP
6144:Zq3dJEEmAs8ZGFC4dWWifXCew/4CuHzSzQ73tGYq2ix5+Zrxn7gpYPQhRri5tS/:0NJEEmLEGFC0ivvA9z8NvaK5W+aRW0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 992 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 992 AcroRd32.exe 992 AcroRd32.exe 992 AcroRd32.exe 992 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\744f970f8115803722b54e36da3367d0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:992
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5affcad21342f6827694a7664a7cb2778
SHA144663056ce5c2fd1bc7ddd0b03946bde9e1e272e
SHA25692f245a51c7b5c7b26974e2898afd729f722fea35267e39f2e8e40885717e927
SHA512224a5f461c33115db71a9ff7e7b9ac4bd79f48c19391477de7cb353672ab8334136acb29bdff7f2b2377adc53c25f8c9ba0d3e61f08f67a97f0b7d6ccd45b23c