Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
14-06-2024 06:52
Behavioral task
behavioral1
Sample
aaa82f6c78172bedc6892d88be2685b0_NeikiAnalytics.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
aaa82f6c78172bedc6892d88be2685b0_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
aaa82f6c78172bedc6892d88be2685b0_NeikiAnalytics.pdf
-
Size
439KB
-
MD5
aaa82f6c78172bedc6892d88be2685b0
-
SHA1
5184b9f75fb7e6ffdf5227c68d002d37f027e915
-
SHA256
d7da0110c860f0ea6d173a94aeeb1eabfa3fd642ca6fb7c14eb54f82c9961e0a
-
SHA512
8289625adeaa5c0f02a494c06b66575f01050317e06b6cdb46c43672b92037056e9d46d3ec1779203ee55b899b258fef000f51b1d3550b9b936439f3f91ba7a8
-
SSDEEP
12288:JgFEp0gP5pYJi5XAKAJmiOp1l0jMg2+yzGjA5:UK0Q5pfYmiOCjD2Hqe
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2152 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2152 AcroRd32.exe 2152 AcroRd32.exe 2152 AcroRd32.exe 2152 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aaa82f6c78172bedc6892d88be2685b0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2152
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a146eb7bf43c285604a04ff9a05b874e
SHA154f78665d46275e9c808edda73b43fa09567f39b
SHA2564c6cbea3b2adab0a5b100976492add4cd7e13493c54055dbe80230068f950edf
SHA5127c4524d86ed697f1203bf43d9bb26a24cc9f1025262b76b6ebf065c5c08ae1d18eef34a5ff2ee6a9a90d29f0df7d14ce44ed3975ec68f63110a04198f7e853b5