Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
12/06/2024, 20:43
Behavioral task
behavioral1
Sample
425db3c4860ffc8d2cf11bd1b11c4620_NeikiAnalytics.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
425db3c4860ffc8d2cf11bd1b11c4620_NeikiAnalytics.pdf
Resource
win10v2004-20240611-en
General
-
Target
425db3c4860ffc8d2cf11bd1b11c4620_NeikiAnalytics.pdf
-
Size
71KB
-
MD5
425db3c4860ffc8d2cf11bd1b11c4620
-
SHA1
23aa97ad12ba37ea112a2188da4a52599601d8cd
-
SHA256
1ed116bedb5cf83097181041c1c55ffbaf9e73e43358b61ea73367c5037960da
-
SHA512
d8dfe42b8eeff0f9dd97d5642d6ea6537691860db732f224e2bebcfa78db541272d009d3ebe87f5add435cb75826e5fbef733d1d2097a7966c203254c298e906
-
SSDEEP
1536:1eO3uss+Y7PleYPQKZ3pbbyaP/GkuQrd/IlKlz2nbmhz3yQf2XoluABKwEa5oU:53Bs+YjgxKZtyaPbrd/IM9bSogAowEa9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2944 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2944 AcroRd32.exe 2944 AcroRd32.exe 2944 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\425db3c4860ffc8d2cf11bd1b11c4620_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2944
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59d4feab1a073dc19925dbe5ddf818bf1
SHA1abe46a64208522d43d6d57610faf4c160c796492
SHA2568d4235654257ff35c12f10f4d0f768cb56489c10672fa1c822deb8783eba5292
SHA512b4425deb296dc06a827621b54fd2c8f72c0b3db39425badf2017d20fcd375acc4da4fa73d255cc2834b5d9a7cb1341d2f2652e360a947cd3b9ef9c2aa04c3ed1