Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 23:51

General

  • Target

    0e402d98bf0dddbb83750ecc41b65410_NeikiAnalytics.pdf

  • Size

    329KB

  • MD5

    0e402d98bf0dddbb83750ecc41b65410

  • SHA1

    2073a80e9bcc402f5bbcd3990485dcd3cabae7e8

  • SHA256

    83cc432ffd46576f85c6e33e106c1971160414b925e71e478e963926341baf96

  • SHA512

    7a3a5146bd6887bbca026d291b9a62261375ac92f276928ed6656290c4fe2869abf34d05b52df3a095bfef33a556d1ecb82fa6e0b341564782937fe38a5674e7

  • SSDEEP

    6144:HE4b3bULZfAVgSZnG8DZ5Kg3JdocMAje9eGx49H+QI:13bqZ4VgYRDjJXoFN9ep9M

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0e402d98bf0dddbb83750ecc41b65410_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1688

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9a786836e4b4b42bf4d6c0aaf5619d22

          SHA1

          74a636a4cf099e14ffa3f4f8ca6c5fbe57ac14d7

          SHA256

          8eee3149680aaa04209f99d8f64977bf6568719faf39c6470ae7e864ded7a49b

          SHA512

          90d9a2d492350d31fcfac8267e537b10a946b61aaa617c2dd27c1f711af095e9ccc5b9531c44cd98138da9cb8399afcedfc1b2487464ed5b1ca4f1518fc3ada1