Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 12:31
Behavioral task
behavioral1
Sample
7c68d154da21a373d4cb50867e539150_NeikiAnalytics.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
7c68d154da21a373d4cb50867e539150_NeikiAnalytics.pdf
Resource
win10v2004-20240611-en
General
-
Target
7c68d154da21a373d4cb50867e539150_NeikiAnalytics.pdf
-
Size
492KB
-
MD5
7c68d154da21a373d4cb50867e539150
-
SHA1
a55b1e967c125c13621c98b9bad2490139f96d9f
-
SHA256
3e472cd115f166635bb07a3b17fd8def8c6db7523d21a9807453a4a01366284c
-
SHA512
efbb1f9fbde6c128c8c392589210b34df82d23e30dbec85721414330b7cfca8defdc07b5599477c962760f843883301574e98104f7905188b85aa094044987b9
-
SSDEEP
6144:m5w37F7TAUPSnrDJnFgip/YmbC8zjc3XMZbWAYR7ANgfPK/Q52U0RfqMbfQj/:N7F70gQrFFgiyl8vkEbWAYJANb/O2dL8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2860 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2860 AcroRd32.exe 2860 AcroRd32.exe 2860 AcroRd32.exe 2860 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7c68d154da21a373d4cb50867e539150_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD56ea2eb3d6f7bfa8cff2a617a5ebe0cd4
SHA13df7c23429e098006780c00e18353a931d18351f
SHA256f82448203964542d98a71447cbf88bce0e7b644c23fc071435ebaa35dbf8be1c
SHA51272e8682ba5633c4b4508f0fa520c28319e6a7550223d48e900fa45b362ea73908bcee83a0d53e2094ace79b1813e066e8f8cb71a4ccc00ad3325cd97166a3d1b