Analysis
- max time kernel
122s - max time network
127s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
02/06/2024, 07:01
Behavioral task
behavioral1
Sample
4cf499b7e7c2b950efd4dd2e5d1ae3c0_NeikiAnalytics.pdf
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4cf499b7e7c2b950efd4dd2e5d1ae3c0_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
6 signatures
150 seconds
General
- Target 4cf499b7e7c2b950efd4dd2e5d1ae3c0_NeikiAnalytics.pdf
- Size 91KB
- Sample240602-hs9rvsec7x
- SHA256 5a1a3ea2683ced4603a3ecdfda319931856b9121094560b10ca400bab876d113
- MD5 4cf499b7e7c2b950efd4dd2e5d1ae3c0
- SHA1 f143a35427312dc18581015e2472d654a63f1652
- SHA512 26c76de5cb089bdc28cf11d317958a5347cd1f169b29951e83a4a68021a3aca28fd6257b41d8d9a4b3cdd8d93fc8272d3ca1a0ee3ac60f1e20bd71c55ec643fa
- SSDEEP 1536:P5e0JcqcJjSQ4KfRh8nSm7rmTyQF5cBY3/9WPH1aYiUybyK7JIn8RXE/eZRX0gn+:ReOcJGORh8SrTyQFiYqVrybVmEU/MXV+
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2612 AcroRd32.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2612 AcroRd32.exe 2612 AcroRd32.exe 2612 AcroRd32.exe 2612 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cf499b7e7c2b950efd4dd2e5d1ae3c0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2612
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 d518140f0a74e78aa7601880d6068811f61d07e3b59ffabe1bbdb88d574aac51
- MD5 12f1389d437d2e807629c7b8f7210d0e
- SHA1 79d3dbcf47d5f09100e27d40d98563239cb8ca06
- SHA512 85600de95167da63fe40efe2499a9d15598f7ac5810e62e24b268f93b8e3fb9f704e088b8f2795adb00398767bf7d6a8efa572bdcdf87bb28ffc78aee2a1c456
- MD5 SHA1 SHA512