Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 20:43

General

  • Target

    425db3c4860ffc8d2cf11bd1b11c4620_NeikiAnalytics.pdf

  • Size

    71KB

  • MD5

    425db3c4860ffc8d2cf11bd1b11c4620

  • SHA1

    23aa97ad12ba37ea112a2188da4a52599601d8cd

  • SHA256

    1ed116bedb5cf83097181041c1c55ffbaf9e73e43358b61ea73367c5037960da

  • SHA512

    d8dfe42b8eeff0f9dd97d5642d6ea6537691860db732f224e2bebcfa78db541272d009d3ebe87f5add435cb75826e5fbef733d1d2097a7966c203254c298e906

  • SSDEEP

    1536:1eO3uss+Y7PleYPQKZ3pbbyaP/GkuQrd/IlKlz2nbmhz3yQf2XoluABKwEa5oU:53Bs+YjgxKZtyaPbrd/IM9bSogAowEa9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\425db3c4860ffc8d2cf11bd1b11c4620_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2944

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9d4feab1a073dc19925dbe5ddf818bf1

          SHA1

          abe46a64208522d43d6d57610faf4c160c796492

          SHA256

          8d4235654257ff35c12f10f4d0f768cb56489c10672fa1c822deb8783eba5292

          SHA512

          b4425deb296dc06a827621b54fd2c8f72c0b3db39425badf2017d20fcd375acc4da4fa73d255cc2834b5d9a7cb1341d2f2652e360a947cd3b9ef9c2aa04c3ed1