Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 23:16
Behavioral task
behavioral1
Sample
8f44406fd7b1f4c773d306cfd61830c0_NeikiAnalytics.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
8f44406fd7b1f4c773d306cfd61830c0_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
8f44406fd7b1f4c773d306cfd61830c0_NeikiAnalytics.pdf
-
Size
441KB
-
MD5
8f44406fd7b1f4c773d306cfd61830c0
-
SHA1
09bfc36a3faa0f1cbaaf84e0016e84377a425f9a
-
SHA256
66db196ed21c2bfba9d24ac8c39989a46093550b43997cad56414706c4e1786f
-
SHA512
42013012815b0cf4dbe64911f3466237062513862f376e4eb5fb9f0705ad9fc97bc6d831d29c531b1f71748bab3048568e7425b9946ea27cca29435d1c4e2a97
-
SSDEEP
12288:ZvFVBRLeKKVHPci78NBCV5D7RKrfNj9gOXq22KHd5U8TqIA5:FfHLTKN0+8WVN7RKB9XXtrVA5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2012 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2012 AcroRd32.exe 2012 AcroRd32.exe 2012 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8f44406fd7b1f4c773d306cfd61830c0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD53d8192d5209c6fdb0251e802e416e4c7
SHA1676a44bc206cfeb6a18bc82bfb35912b0fb710ed
SHA2560cd422d834342a26b1c62edb954bea37d9e6bc966ee0125957433e7c892d949e
SHA512584aa8eabc94e231ad988c84af82d6e88212c3b4cd2d19c2ff46fa61ebcb684f780da2c304bc23a70a6f9514734374bddceaca41e0e38dbfea3956264bbeb8d2