Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/06/2024, 08:05
Behavioral task
behavioral1
Sample
e2e7bc03cb93885e4cc1cb965159c920_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e2e7bc03cb93885e4cc1cb965159c920_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
e2e7bc03cb93885e4cc1cb965159c920_NeikiAnalytics.pdf
-
Size
78KB
-
MD5
e2e7bc03cb93885e4cc1cb965159c920
-
SHA1
6fa9109948ccc8a35d5cc9f61f290a6fb8056adc
-
SHA256
1221027a8d7eca7f3c49aa696e667981227c70fdb8de260c5d0b300d96088363
-
SHA512
d56a581a13706c230350f8487eef9bb98d6ca843486e18fa92d2fbdf968bde65ebe8e62a36d63ded974dab004479682d08ec2e04ac51463bf6bbe58963afcbf8
-
SSDEEP
1536:dse9sIETN33iVrLqCZvsvoEvCb+oWCEfRkd1liXLuXppLHa8:pCIkN33iVrLq2OxvwzmeiXCXppbB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 756 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 756 AcroRd32.exe 756 AcroRd32.exe 756 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e2e7bc03cb93885e4cc1cb965159c920_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:756
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5eb57bc022c14c2659c47537e04a88920
SHA160ca316e10d96e850c902a5f9be62166ad86cfab
SHA256d0a243f29ec6753a30aeb1091400cf89c1a44dd750c354f09b033a138bfa5be1
SHA5121c41f7594a48080310d6483518897b1a839699cf0245c0429393b2c5d02f7676d155e5170136217434461fcfcf7be8c33e5f33f80662aaf7362287bf1b80bf40