Overview

overview

6

Static

static

6

8c712c6d55...cs.pdf

windows7-x64

1

8c712c6d55...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 22:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8c712c6d5519e4a5d9eb0ed97fc62ed0_NeikiAnalytics.pdf

  • Size

    249KB

  • MD5

    8c712c6d5519e4a5d9eb0ed97fc62ed0

  • SHA1

    6774ed93fcbb35ec805ca11873e87ab0b466aa90

  • SHA256

    48c175a84b7ce63d3639a664476b49915fe677a25532c804216e7178a521f5e2

  • SHA512

    d335a1374ac0fc924f8a1222bc352616c2ae39eb159e1015931c993e0f5121a7a7d4ddba607c1d677611cad42b90d1632fadbe49e9a2960c5c4c9f42fe1adff9

  • SSDEEP

    3072:bJ70Lg/9kN7ryHwaj1U1Nx9+k8fF4hKQQHyGjieRkNVhf+9IbaJR/BRQLexsVOrN:bN0Uw7ryQMUbxn8rQQP94fCBBRhrN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8c712c6d5519e4a5d9eb0ed97fc62ed0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a52752b87731620b0e358cc71ab74855

    SHA1

    e50311a4c689984e9a818db31e88c4576550afc1

    SHA256

    f541b7233d638bcf4e72b0d1d2f6e30d23b741d6d950f95e48bb743ffe49909a

    SHA512

    56e2988390ad28efc02efec9018b025cc3f032e1d950432102a9004845f3c16939825037a882722b477fa1f8c13ff8526e0269c70bac3ad6af2cbdd1a45a6cca

    Download Submit