Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 08:24
Behavioral task
behavioral1
Sample
abae2ac3e1a53bc5f53ab32d9ceb0290_NeikiAnalytics.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
abae2ac3e1a53bc5f53ab32d9ceb0290_NeikiAnalytics.pdf
Resource
win10v2004-20240426-en
General
-
Target
abae2ac3e1a53bc5f53ab32d9ceb0290_NeikiAnalytics.pdf
-
Size
83KB
-
MD5
abae2ac3e1a53bc5f53ab32d9ceb0290
-
SHA1
9fb7ec3dfa8c3abacb7323d07c265322f14dcf04
-
SHA256
aa99f0c47d0306fae61a619de980740f25c4b5d39bb21e8af635a5ae04682e67
-
SHA512
03f621094d20e355fd4eacc62cfc47821ca9510679c777d27fe6beb81f38d6decca68bc7521d6d1d047dad014bb7e1388c83d16b316e1cd07e0a161c31c3eee8
-
SSDEEP
1536:TQ5OEoBSAXl7M5PYmcVuzVicAxTI6afQq4N2H2UOtn34HKIIbnypqOxcfWQK9I+/:JQAdM5AmcVuRQTI6rHoLOtnuabypVxc0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2280 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2280 AcroRd32.exe 2280 AcroRd32.exe 2280 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\abae2ac3e1a53bc5f53ab32d9ceb0290_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2280
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5481a8f9a7ecd34c0a3fdca38b409ed5c
SHA1a4f076583a24bde7740ad4e5d9f794a3daf9a4e1
SHA2569a5d726f96962cab3c9de4c2647f3857c25472a2995f5f63f7bb3b0375d5f894
SHA512eb0389c06669e1ab09200bd7cc2b11db6a84ff87b0ebaad74176774c92f1634ea5114dfb6d9210806bef07807a9a9932d09cd34d51ff114a2e29dd69e8f98ac7