Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 12:24

General

  • Target

    7bec2d7bb9494ec327da239eff229330_NeikiAnalytics.pdf

  • Size

    96KB

  • MD5

    7bec2d7bb9494ec327da239eff229330

  • SHA1

    7ee41c74c50e2012149191f4a628254c588ac078

  • SHA256

    4bb718999333dcd5396035e5d91b3d85b17f787d8680ff1ec7b8fda2b1c376d3

  • SHA512

    c4906ef40d4d8195800a497252f78656aacea291bef17443f7684b38d9c70be2d921a92d6655cdc8ac40018b12a76fadd3ceeb41d8ee881c62851e43d9a34d76

  • SSDEEP

    1536:HyHT+V9ehq4ths3FXTnD0C84kIP74cIE4XynevtKR7Hbjx98BhTs+ubV+O4Q:4+Tehpths3lTnD0rkP/wtKJjx9KTKM4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7bec2d7bb9494ec327da239eff229330_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b20a66f7662563e46bf46c2a7084ef71

    SHA1

    f470f2e15c7e70757b224a130f2a9729529c459e

    SHA256

    5d95222c2d7b3e189cb718f16e7cbb8afed6b8c99e801c8f7965b7d70aac16db

    SHA512

    6b1bd070db97316e264bdf004ba4e18ab8b92494e9ec319c037335590379afa229721875a6db42de552173a4199b6642b0c31bf842f05e1eab211c6a760d1163