Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 11:52

General

  • Target

    09e35c61f6405b515ab95b5c8a400580_NeikiAnalytics.pdf

  • Size

    68KB

  • MD5

    09e35c61f6405b515ab95b5c8a400580

  • SHA1

    d038c37221d53785ae1ce289da6bbc0a096e9b79

  • SHA256

    05f41e077274336b3d12c6bff209cb6425eb17371d0adf386349d7e9ba19fb92

  • SHA512

    c5900f0920e12c653333dea1a31c514933d519228f1b97f4b5550667ee832c36655409080de42e914cd4485f41be55f49c00ce428963f93b8145cc1e4124bee4

  • SSDEEP

    1536:STQ2PTOL8H08MsFUzJkGiQppPeUDxzWabCQhoixEkqOAuW+Zio:yQ2PTOL8UX+OJkPs1DxqaOTA3BAun

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09e35c61f6405b515ab95b5c8a400580_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f654831c7945d7df958c3819e30fbe38

    SHA1

    f7e2f9fcba860342eeb01081cb4b3e39d53b37f1

    SHA256

    78479d5d1cee4057f800d4ba7d6f0c5c469be9ac05d9db9013e26d0ed0aca95c

    SHA512

    bcfad6c5fd865d16c7eeac52d48be5f80b201d37506d7fd42cc4718f01249ac9339b2d57b1be292ca825d27174e406a8b64f6ab7788be52575f025e3161a9d09