Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 12:18

General

  • Target

    7b99922b03bb765a91beda6d39a91140_NeikiAnalytics.pdf

  • Size

    77KB

  • MD5

    7b99922b03bb765a91beda6d39a91140

  • SHA1

    34f27e9df539b859540cd3e130416ffbf2f64602

  • SHA256

    acffa09f74d42e678ca1e0b74dccb987217f215b3c96ad49b89cc41643c57f22

  • SHA512

    ec226d31966bdac72277ab6ed93161f9d19845d9ab94229124a3f409ab4cbcec0b5274901dfda085ff0018d9cae716828b103d2e19c04b60094ddbc688479c0d

  • SSDEEP

    1536:qDgB3OqmqtySrjiiC3Mw5NcU7MOXoq7Ng0Hytam5krKAelYkgDDntT:eII3SjCcw5NcU7MC7S0StajrnelQDR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7b99922b03bb765a91beda6d39a91140_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    23a5b70df9a71ee5f898869f0a0a7309

    SHA1

    03a319ca1d13d5ff26e37fc2d7fa0475811a9267

    SHA256

    98ec6f17313d4fd4bdb44b71c951b5a6ad8a8cb6e04ad4ad3f902693b08937c4

    SHA512

    cddf34fe63d1bebb7a9692624d3fbabb244c9e2088eab7bb4589c2de4243c2d6fba6912e358f83266a669d3625a485d7427945c9fa59bcbbe2e9f3007b81f7ec