Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11-06-2024 20:45
Behavioral task
behavioral1
Sample
0162e6dc33fbb700e918c52f7249b6f0_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0162e6dc33fbb700e918c52f7249b6f0_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
0162e6dc33fbb700e918c52f7249b6f0_NeikiAnalytics.pdf
-
Size
143KB
-
MD5
0162e6dc33fbb700e918c52f7249b6f0
-
SHA1
80cb4500a38282c6a9c47ecc8b0f808e09f3899c
-
SHA256
1bf1aee5db7fe91e0cc25e5ed64857b218c5780ed560883fd87a864447b6ac77
-
SHA512
f26168db8328059a9ab989b18fad99d865804bfd5aa1829d5ea5d4ed5ab9151ee014e91795a670918a6424ff8260a932557dab28272d11d7c944d4a530153037
-
SSDEEP
3072:Oa80i56CLq0VahjnvBmH7m7yjZmfuQ+oEH9R2ZiUuJVovpe:OaVXeKjnvB+mLfunoy9eS
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2776 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2776 AcroRd32.exe 2776 AcroRd32.exe 2776 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0162e6dc33fbb700e918c52f7249b6f0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2776
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ad50318291437a4b579678d7fe6b5116
SHA13eb40cb00458892fceecdfe3920b6f266513dbaa
SHA256c1a5052e8738000df66099716eb4775a3b62aabfe1079cfc15b778ad65be7bd8
SHA5126680f3a3dd86f1f0f4c46e7677fdeb5f57507e30f9bc4f9e87a1af00d9019987d1a008c3233d14729b265caf09701409f6178f6af8798ba791e114f206d516c9