Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
14/06/2024, 02:32
Behavioral task
behavioral1
Sample
9b659210e092222820dc92a1818f51e0_NeikiAnalytics.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
9b659210e092222820dc92a1818f51e0_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
9b659210e092222820dc92a1818f51e0_NeikiAnalytics.pdf
-
Size
76KB
-
MD5
9b659210e092222820dc92a1818f51e0
-
SHA1
7109ca52ad1ba104d9275d9d2a176a4fff1d3e83
-
SHA256
81165a461868bbfe957d0bd97de89499f86324a4ef490e6a0f8320ff097165ba
-
SHA512
628d94af45ff1d38222560b05bb3b7e9db7093a87207fe765d173483b1879adb446fe6a9039737c91b6986d5aad3a528b0db4009dfceee3c0a12d9d2fdb0e6b5
-
SSDEEP
1536:d6M3HT+TmjXS2XuVR1pKDroomCBdtqKtHQ+/SiM0XIMJW326+:UqcY+VDpkqXISiMKJW3U
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2280 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2280 AcroRd32.exe 2280 AcroRd32.exe 2280 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9b659210e092222820dc92a1818f51e0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2280
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55fa27a803701ee692d26a20a363872f3
SHA19164599bb375cf74c65e8b8ebf07d1ba974e6024
SHA256b0b290b9dc9904de3079c0573b0dcfdf725a0051bb8ded6f76944eb2b7804835
SHA512389dfd34b3696bb2074944f5abd29e90cd189dc78299a1fc80fe8cdfe706f42d580ac997ee85d499825f4d7721c942fb4b2c0e6d0ec3f3cb89f74a4746830163