Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 13:39

General

  • Target

    26bbf06991a650057408c292e8d187c0_NeikiAnalytics.pdf

  • Size

    39KB

  • MD5

    26bbf06991a650057408c292e8d187c0

  • SHA1

    59a452a26e52e6be12f48ba18c39fc9cb8cbae28

  • SHA256

    53dd49a5173eae305db4b3447ff227faed07bf4874e29326d8dd194c576a440b

  • SHA512

    42d26158707c9c2f685d5f5da34ef2415a25fc569027b7d2e2db4aae5c4e91e750673f6c73cac6aa80d2afe2f871656b606c6a9401d9a6030709133a6e319d08

  • SSDEEP

    768:BT4utOGzYpNeRMVWmk5CVmvA7sX+KfEweSKjlPP71uZgmkyCeQ9pzV4TeFU:J4mO2Y4YnsX+Kt10jmgsH+p4YU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26bbf06991a650057408c292e8d187c0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2744

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ba43cceba8606a05e441e01ae7dc8623

          SHA1

          564244f50b92a4099dc55d93f6ed1484e0cf2c86

          SHA256

          00379b682fbeee951f8422d4f9919186e604b567752f3f2837162ed785b7e8c0

          SHA512

          7149372394f1f69dcb9e98abbd5188cafc078ee496fb9409e23939e7d94fec7d614eab06884e49c5f13436b25d711bacacec8eedfae37c63ae09e98e0d92908b