Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 22:30
Behavioral task
behavioral1
Sample
8c55ec6b01322c6057f593024db4ac10_NeikiAnalytics.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8c55ec6b01322c6057f593024db4ac10_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
8c55ec6b01322c6057f593024db4ac10_NeikiAnalytics.pdf
-
Size
86KB
-
MD5
8c55ec6b01322c6057f593024db4ac10
-
SHA1
88e4e79d8f26cfd3cd6866667bc454294e9d9174
-
SHA256
3f018dd8dc2d9ea54982d951a15bd25a590b83279bc24e646a78757c7f7c87a0
-
SHA512
332dd2e85dfb0b0adcdcfcc90ebbf436c80d45fe2e87ebb8c3641e264f75af323f253bd54f7e516ff6588cf231a3c6aedc6b117b83f201d0395be24f30ca2f00
-
SSDEEP
1536:w25e0JcqcJjSQ4KfRh8nSm7rmTyQF5cB4JvpfI9GY8AstfIe3dp/RPhHEIHASn:9eOcJGORh8SrTyQFi49tIc5Jj3z/RPhb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2928 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2928 AcroRd32.exe 2928 AcroRd32.exe 2928 AcroRd32.exe 2928 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8c55ec6b01322c6057f593024db4ac10_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD55eab786738474839766d4acc909412f7
SHA1e9bf3e1216117ec867091536512ebabf6d6855df
SHA2561d4b813f97ef00faddd2043926384eabe635825f3cbf4c9511dfb5efadd5c00d
SHA5120ac747646ac1994329efe775145c893acaaae1ee2c20ae44618be2be570483d346012a1069fd4d2e266124d4f4eb98275fc96dc59e6f186a103f4982380a0c00