Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
01/06/2024, 13:39
Behavioral task
behavioral1
Sample
26bbf06991a650057408c292e8d187c0_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26bbf06991a650057408c292e8d187c0_NeikiAnalytics.pdf
Resource
win10v2004-20240226-en
General
-
Target
26bbf06991a650057408c292e8d187c0_NeikiAnalytics.pdf
-
Size
39KB
-
MD5
26bbf06991a650057408c292e8d187c0
-
SHA1
59a452a26e52e6be12f48ba18c39fc9cb8cbae28
-
SHA256
53dd49a5173eae305db4b3447ff227faed07bf4874e29326d8dd194c576a440b
-
SHA512
42d26158707c9c2f685d5f5da34ef2415a25fc569027b7d2e2db4aae5c4e91e750673f6c73cac6aa80d2afe2f871656b606c6a9401d9a6030709133a6e319d08
-
SSDEEP
768:BT4utOGzYpNeRMVWmk5CVmvA7sX+KfEweSKjlPP71uZgmkyCeQ9pzV4TeFU:J4mO2Y4YnsX+Kt10jmgsH+p4YU
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2744 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2744 AcroRd32.exe 2744 AcroRd32.exe 2744 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26bbf06991a650057408c292e8d187c0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2744
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ba43cceba8606a05e441e01ae7dc8623
SHA1564244f50b92a4099dc55d93f6ed1484e0cf2c86
SHA25600379b682fbeee951f8422d4f9919186e604b567752f3f2837162ed785b7e8c0
SHA5127149372394f1f69dcb9e98abbd5188cafc078ee496fb9409e23939e7d94fec7d614eab06884e49c5f13436b25d711bacacec8eedfae37c63ae09e98e0d92908b