Analysis
- max time kernel
120s - max time network
123s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
03/06/2024, 04:37
Behavioral task
behavioral1
Sample
9bc70395566f77acf13db21a2cf5bc10_NeikiAnalytics.pdf
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9bc70395566f77acf13db21a2cf5bc10_NeikiAnalytics.pdf
Resource
win10v2004-20240426-en
6 signatures
150 seconds
General
- Target 9bc70395566f77acf13db21a2cf5bc10_NeikiAnalytics.pdf
- Size 414KB
- Sample240603-e8s79sbf5s
- SHA256 8aae8a43ccce52e3a4424b323a2d3e855691aefeae9e8c435d9c8d0c8239d0d2
- MD5 9bc70395566f77acf13db21a2cf5bc10
- SHA1 55d9f75f23b5c82e0ff27fbf366744292f4c1ab5
- SHA512 ceda2945bb32bf107d9859d4669bb9bc280e7e12f44033aa52606dc6eafd8844842b5677947b0991c70e2e88a90dcf8a0caf221a6374d8ae89f6fde3dd4bc338
- SSDEEP 6144:zdooNUgGn0BjiamXSiVB4YTDUcgGRxvtYmR03GEV6yGFkOAaRX:poongiwSigigGx1TuYCAX
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2100 AcroRd32.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2100 AcroRd32.exe 2100 AcroRd32.exe 2100 AcroRd32.exe 2100 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9bc70395566f77acf13db21a2cf5bc10_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2100
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 9a6b30c8b184a498c4e8c8771b93632dc6526250cd9278a0253981ba3d1405ef
- MD5 40d0586d56fd67095dbc4e9e89c48676
- SHA1 1d82cd69211f484945ad0e3698978133fcb81b01
- SHA512 73140667943ac6c7ab5f657b20d962c23394270222175af7bcfb593a207f6a0093911e42d9e6af7fff95115e27efc63bd4d230bd00ff3268f83f7469b66356ee
- MD5 SHA1 SHA512