Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 11:52
Behavioral task
behavioral1
Sample
09e35c61f6405b515ab95b5c8a400580_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09e35c61f6405b515ab95b5c8a400580_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
09e35c61f6405b515ab95b5c8a400580_NeikiAnalytics.pdf
-
Size
68KB
-
MD5
09e35c61f6405b515ab95b5c8a400580
-
SHA1
d038c37221d53785ae1ce289da6bbc0a096e9b79
-
SHA256
05f41e077274336b3d12c6bff209cb6425eb17371d0adf386349d7e9ba19fb92
-
SHA512
c5900f0920e12c653333dea1a31c514933d519228f1b97f4b5550667ee832c36655409080de42e914cd4485f41be55f49c00ce428963f93b8145cc1e4124bee4
-
SSDEEP
1536:STQ2PTOL8H08MsFUzJkGiQppPeUDxzWabCQhoixEkqOAuW+Zio:yQ2PTOL8UX+OJkPs1DxqaOTA3BAun
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2172 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2172 AcroRd32.exe 2172 AcroRd32.exe 2172 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09e35c61f6405b515ab95b5c8a400580_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2172
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f654831c7945d7df958c3819e30fbe38
SHA1f7e2f9fcba860342eeb01081cb4b3e39d53b37f1
SHA25678479d5d1cee4057f800d4ba7d6f0c5c469be9ac05d9db9013e26d0ed0aca95c
SHA512bcfad6c5fd865d16c7eeac52d48be5f80b201d37506d7fd42cc4718f01249ac9339b2d57b1be292ca825d27174e406a8b64f6ab7788be52575f025e3161a9d09