Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 08:24

General

  • Target

    abae2ac3e1a53bc5f53ab32d9ceb0290_NeikiAnalytics.pdf

  • Size

    83KB

  • MD5

    abae2ac3e1a53bc5f53ab32d9ceb0290

  • SHA1

    9fb7ec3dfa8c3abacb7323d07c265322f14dcf04

  • SHA256

    aa99f0c47d0306fae61a619de980740f25c4b5d39bb21e8af635a5ae04682e67

  • SHA512

    03f621094d20e355fd4eacc62cfc47821ca9510679c777d27fe6beb81f38d6decca68bc7521d6d1d047dad014bb7e1388c83d16b316e1cd07e0a161c31c3eee8

  • SSDEEP

    1536:TQ5OEoBSAXl7M5PYmcVuzVicAxTI6afQq4N2H2UOtn34HKIIbnypqOxcfWQK9I+/:JQAdM5AmcVuRQTI6rHoLOtnuabypVxc0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\abae2ac3e1a53bc5f53ab32d9ceb0290_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    481a8f9a7ecd34c0a3fdca38b409ed5c

    SHA1

    a4f076583a24bde7740ad4e5d9f794a3daf9a4e1

    SHA256

    9a5d726f96962cab3c9de4c2647f3857c25472a2995f5f63f7bb3b0375d5f894

    SHA512

    eb0389c06669e1ab09200bd7cc2b11db6a84ff87b0ebaad74176774c92f1634ea5114dfb6d9210806bef07807a9a9932d09cd34d51ff114a2e29dd69e8f98ac7