Overview

overview

6

Static

static

6

245fb21295...cs.pdf

windows7-x64

1

245fb21295...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    11/06/2024, 02:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    245fb21295632cf3f94a2893099ddc90_NeikiAnalytics.pdf

  • Size

    175KB

  • MD5

    245fb21295632cf3f94a2893099ddc90

  • SHA1

    1130bd64171dcad7a86116b8aa28fcc04429e17d

  • SHA256

    92d9a1dc81854b1da54627c2b9668876da9ab47848989ff9161d4ead87f6a276

  • SHA512

    0af96156d9f56e74db6c7c0ae27d9ef4641c97b8c9e95ccd9148a6a742c5c34eef90faae04d16cc4ac202f2b6b1d0ffc07049b658f7c35519d7045a69095ec7c

  • SSDEEP

    3072:kkUZKeAS/F/pnkxCjx+4i38nCKq/bawrUDMgrwvP9oYaWT1bLJ:YKWF/JkxCkvTKhwQDZnOB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\245fb21295632cf3f94a2893099ddc90_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e5480afee3450925246dbce96660a368

    SHA1

    244675ca86c2cfa31ccac55775d7cba09d95dfc4

    SHA256

    a7c132138c14960f447df375a2a452ffdbc984a6f6834f1799046edb6e3bd07c

    SHA512

    db0803395065bf18f1f6525a99f0c97b542b223287a100063f96a17938008814f5e48208f502ee23d66973d480024334d41edfc6bbfeb0b7bdb6a372b8a80e42

    Download Submit