Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 01:08
Behavioral task
behavioral1
Sample
933ec07f61bb77a0b1eacfff1f1b93f0_NeikiAnalytics.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
933ec07f61bb77a0b1eacfff1f1b93f0_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
933ec07f61bb77a0b1eacfff1f1b93f0_NeikiAnalytics.pdf
-
Size
70KB
-
MD5
933ec07f61bb77a0b1eacfff1f1b93f0
-
SHA1
37845160175bf786e534d767afe304886624b5ea
-
SHA256
0298ec234c856c7c2d04bdec68a22e4fd2ea98c28363ca2d42c6926c894542c1
-
SHA512
3cd18dbf587aaec0e384541f2f1a640eb99c4929c32adb9aa815c0a5fa133ecb7021eb5b128dc8acdeb15bb0fd801902dd075683d5efefe3bcbdd7fc503a80d4
-
SSDEEP
1536:hielkCytn2YGKYch82kTQUPKlG1AZTB0kY6ePt3OEbUMEvB9PPu:ZlTo8DXKYiZTmkAivPO
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1736 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1736 AcroRd32.exe 1736 AcroRd32.exe 1736 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\933ec07f61bb77a0b1eacfff1f1b93f0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1736
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50d76244118148285fda70bf7ed24bf60
SHA199a95c33c01360e8ae13c332915f23b174e8245d
SHA256bee6485bb27a532f20f3456e267ba724528d5508e5c7a53e9cd40ee9a6e675b1
SHA512f7108f40ce9adeb42d3b49743826d8c0b58d9ee77ab43ee6209eaf5526b1e723cb8e483ee8af0ac146303375b9ea159cd277cf191d4597de103bba362302c31c