Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 12:24
Behavioral task
behavioral1
Sample
7bec2d7bb9494ec327da239eff229330_NeikiAnalytics.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
7bec2d7bb9494ec327da239eff229330_NeikiAnalytics.pdf
Resource
win10v2004-20240611-en
General
-
Target
7bec2d7bb9494ec327da239eff229330_NeikiAnalytics.pdf
-
Size
96KB
-
MD5
7bec2d7bb9494ec327da239eff229330
-
SHA1
7ee41c74c50e2012149191f4a628254c588ac078
-
SHA256
4bb718999333dcd5396035e5d91b3d85b17f787d8680ff1ec7b8fda2b1c376d3
-
SHA512
c4906ef40d4d8195800a497252f78656aacea291bef17443f7684b38d9c70be2d921a92d6655cdc8ac40018b12a76fadd3ceeb41d8ee881c62851e43d9a34d76
-
SSDEEP
1536:HyHT+V9ehq4ths3FXTnD0C84kIP74cIE4XynevtKR7Hbjx98BhTs+ubV+O4Q:4+Tehpths3lTnD0rkP/wtKJjx9KTKM4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 840 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 840 AcroRd32.exe 840 AcroRd32.exe 840 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7bec2d7bb9494ec327da239eff229330_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5b20a66f7662563e46bf46c2a7084ef71
SHA1f470f2e15c7e70757b224a130f2a9729529c459e
SHA2565d95222c2d7b3e189cb718f16e7cbb8afed6b8c99e801c8f7965b7d70aac16db
SHA5126b1bd070db97316e264bdf004ba4e18ab8b92494e9ec319c037335590379afa229721875a6db42de552173a4199b6642b0c31bf842f05e1eab211c6a760d1163