Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 23:16

General

  • Target

    8f44406fd7b1f4c773d306cfd61830c0_NeikiAnalytics.pdf

  • Size

    441KB

  • MD5

    8f44406fd7b1f4c773d306cfd61830c0

  • SHA1

    09bfc36a3faa0f1cbaaf84e0016e84377a425f9a

  • SHA256

    66db196ed21c2bfba9d24ac8c39989a46093550b43997cad56414706c4e1786f

  • SHA512

    42013012815b0cf4dbe64911f3466237062513862f376e4eb5fb9f0705ad9fc97bc6d831d29c531b1f71748bab3048568e7425b9946ea27cca29435d1c4e2a97

  • SSDEEP

    12288:ZvFVBRLeKKVHPci78NBCV5D7RKrfNj9gOXq22KHd5U8TqIA5:FfHLTKN0+8WVN7RKB9XXtrVA5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8f44406fd7b1f4c773d306cfd61830c0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3d8192d5209c6fdb0251e802e416e4c7

    SHA1

    676a44bc206cfeb6a18bc82bfb35912b0fb710ed

    SHA256

    0cd422d834342a26b1c62edb954bea37d9e6bc966ee0125957433e7c892d949e

    SHA512

    584aa8eabc94e231ad988c84af82d6e88212c3b4cd2d19c2ff46fa61ebcb684f780da2c304bc23a70a6f9514734374bddceaca41e0e38dbfea3956264bbeb8d2