Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 08:05

General

  • Target

    e2e7bc03cb93885e4cc1cb965159c920_NeikiAnalytics.pdf

  • Size

    78KB

  • MD5

    e2e7bc03cb93885e4cc1cb965159c920

  • SHA1

    6fa9109948ccc8a35d5cc9f61f290a6fb8056adc

  • SHA256

    1221027a8d7eca7f3c49aa696e667981227c70fdb8de260c5d0b300d96088363

  • SHA512

    d56a581a13706c230350f8487eef9bb98d6ca843486e18fa92d2fbdf968bde65ebe8e62a36d63ded974dab004479682d08ec2e04ac51463bf6bbe58963afcbf8

  • SSDEEP

    1536:dse9sIETN33iVrLqCZvsvoEvCb+oWCEfRkd1liXLuXppLHa8:pCIkN33iVrLq2OxvwzmeiXCXppbB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e2e7bc03cb93885e4cc1cb965159c920_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:756

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          eb57bc022c14c2659c47537e04a88920

          SHA1

          60ca316e10d96e850c902a5f9be62166ad86cfab

          SHA256

          d0a243f29ec6753a30aeb1091400cf89c1a44dd750c354f09b033a138bfa5be1

          SHA512

          1c41f7594a48080310d6483518897b1a839699cf0245c0429393b2c5d02f7676d155e5170136217434461fcfcf7be8c33e5f33f80662aaf7362287bf1b80bf40