Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
01/06/2024, 23:51
Behavioral task
behavioral1
Sample
0e402d98bf0dddbb83750ecc41b65410_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0e402d98bf0dddbb83750ecc41b65410_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
0e402d98bf0dddbb83750ecc41b65410_NeikiAnalytics.pdf
-
Size
329KB
-
MD5
0e402d98bf0dddbb83750ecc41b65410
-
SHA1
2073a80e9bcc402f5bbcd3990485dcd3cabae7e8
-
SHA256
83cc432ffd46576f85c6e33e106c1971160414b925e71e478e963926341baf96
-
SHA512
7a3a5146bd6887bbca026d291b9a62261375ac92f276928ed6656290c4fe2869abf34d05b52df3a095bfef33a556d1ecb82fa6e0b341564782937fe38a5674e7
-
SSDEEP
6144:HE4b3bULZfAVgSZnG8DZ5Kg3JdocMAje9eGx49H+QI:13bqZ4VgYRDjJXoFN9ep9M
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1688 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1688 AcroRd32.exe 1688 AcroRd32.exe 1688 AcroRd32.exe 1688 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0e402d98bf0dddbb83750ecc41b65410_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1688
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59a786836e4b4b42bf4d6c0aaf5619d22
SHA174a636a4cf099e14ffa3f4f8ca6c5fbe57ac14d7
SHA2568eee3149680aaa04209f99d8f64977bf6568719faf39c6470ae7e864ded7a49b
SHA51290d9a2d492350d31fcfac8267e537b10a946b61aaa617c2dd27c1f711af095e9ccc5b9531c44cd98138da9cb8399afcedfc1b2487464ed5b1ca4f1518fc3ada1