Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
14-06-2024 07:44
Behavioral task
behavioral1
Sample
adf9db5b3658ef2a4d2e43db884632e0_NeikiAnalytics.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
adf9db5b3658ef2a4d2e43db884632e0_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
adf9db5b3658ef2a4d2e43db884632e0_NeikiAnalytics.pdf
-
Size
307KB
-
MD5
adf9db5b3658ef2a4d2e43db884632e0
-
SHA1
b3f6a817cecaa982a59868aa04c7f10538be79c7
-
SHA256
2e6324bc0b92567c751283bc590f5b6cc2361dae772e256d282e374ac75127dd
-
SHA512
3b43216ba18a95aea9c7c224c4b881d1f14f2621e0394eecb39fdd95745a20402bb2a3d08bcd2ec1e97e827bb117f071519ff2e39c24755927656cf11d9748ea
-
SSDEEP
6144:vSTOqV2xCbFR3M35MJdfG+bRiOUEt3N+JDB:vOoUFdyOfG+9iOUEf+7
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2296 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2296 AcroRd32.exe 2296 AcroRd32.exe 2296 AcroRd32.exe 2296 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\adf9db5b3658ef2a4d2e43db884632e0_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2296
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53b8e5d70b1492c2c39f58608517262af
SHA1d3d4a19239e7d450e19a03dba21597652015d28d
SHA256ff218242278c89d86e38ccd10cae29eafc4f37c06ae2b1a80104936fa9406745
SHA5126627d009b607146e3289d0dbf2e029a461f3d33b8814cdfc2057aa3e0e1ebe0f9a5b2c36e9c7f5fe359514fe12d969e0e390e8035dc091bf31bd938c00ff2956