Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 02:32

General

  • Target

    9b659210e092222820dc92a1818f51e0_NeikiAnalytics.pdf

  • Size

    76KB

  • MD5

    9b659210e092222820dc92a1818f51e0

  • SHA1

    7109ca52ad1ba104d9275d9d2a176a4fff1d3e83

  • SHA256

    81165a461868bbfe957d0bd97de89499f86324a4ef490e6a0f8320ff097165ba

  • SHA512

    628d94af45ff1d38222560b05bb3b7e9db7093a87207fe765d173483b1879adb446fe6a9039737c91b6986d5aad3a528b0db4009dfceee3c0a12d9d2fdb0e6b5

  • SSDEEP

    1536:d6M3HT+TmjXS2XuVR1pKDroomCBdtqKtHQ+/SiM0XIMJW326+:UqcY+VDpkqXISiMKJW3U

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9b659210e092222820dc92a1818f51e0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2280

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5fa27a803701ee692d26a20a363872f3

          SHA1

          9164599bb375cf74c65e8b8ebf07d1ba974e6024

          SHA256

          b0b290b9dc9904de3079c0573b0dcfdf725a0051bb8ded6f76944eb2b7804835

          SHA512

          389dfd34b3696bb2074944f5abd29e90cd189dc78299a1fc80fe8cdfe706f42d580ac997ee85d499825f4d7721c942fb4b2c0e6d0ec3f3cb89f74a4746830163