Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 12:18
Behavioral task
behavioral1
Sample
7b99922b03bb765a91beda6d39a91140_NeikiAnalytics.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7b99922b03bb765a91beda6d39a91140_NeikiAnalytics.pdf
Resource
win10v2004-20240226-en
General
-
Target
7b99922b03bb765a91beda6d39a91140_NeikiAnalytics.pdf
-
Size
77KB
-
MD5
7b99922b03bb765a91beda6d39a91140
-
SHA1
34f27e9df539b859540cd3e130416ffbf2f64602
-
SHA256
acffa09f74d42e678ca1e0b74dccb987217f215b3c96ad49b89cc41643c57f22
-
SHA512
ec226d31966bdac72277ab6ed93161f9d19845d9ab94229124a3f409ab4cbcec0b5274901dfda085ff0018d9cae716828b103d2e19c04b60094ddbc688479c0d
-
SSDEEP
1536:qDgB3OqmqtySrjiiC3Mw5NcU7MOXoq7Ng0Hytam5krKAelYkgDDntT:eII3SjCcw5NcU7MC7S0StajrnelQDR
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2460 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2460 AcroRd32.exe 2460 AcroRd32.exe 2460 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7b99922b03bb765a91beda6d39a91140_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD523a5b70df9a71ee5f898869f0a0a7309
SHA103a319ca1d13d5ff26e37fc2d7fa0475811a9267
SHA25698ec6f17313d4fd4bdb44b71c951b5a6ad8a8cb6e04ad4ad3f902693b08937c4
SHA512cddf34fe63d1bebb7a9692624d3fbabb244c9e2088eab7bb4589c2de4243c2d6fba6912e358f83266a669d3625a485d7427945c9fa59bcbbe2e9f3007b81f7ec