Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
20-06-2024 00:14
Behavioral task
behavioral1
Sample
1be717cc3ce3005a59402c4d04be0b6458820236c332134c10e7cb0ddff6b20d_NeikiAnalytics.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1be717cc3ce3005a59402c4d04be0b6458820236c332134c10e7cb0ddff6b20d_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
1be717cc3ce3005a59402c4d04be0b6458820236c332134c10e7cb0ddff6b20d_NeikiAnalytics.pdf
-
Size
81KB
-
MD5
02f89eabb32849bc3727247f4b72b5d0
-
SHA1
5ddfa9848d03b9f948e529e904fa0b1e5a4db0e5
-
SHA256
1be717cc3ce3005a59402c4d04be0b6458820236c332134c10e7cb0ddff6b20d
-
SHA512
fb82aa8d2cd7fb4f42b0c5b867090c4e55ec1d2be6592aebeb2e09d79639cef8e03f1295220cc595a17c1c4dedce4a3bd9d3383af805f015fbcd99eccd78d4de
-
SSDEEP
1536:skcN8SEAQRMZr1qfYVcJqWZsnPlxJc1RxWHpOvTW6GNTpltYgGPFLBb13cd:YbekBqgVcJqesPlf+VvC1ltYgGPJy
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2220 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1be717cc3ce3005a59402c4d04be0b6458820236c332134c10e7cb0ddff6b20d_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5555160464633ab7b58136983272e8e6e
SHA1fe2db7976a3ec3d139f4c6466f8ea0015252c235
SHA256512f33ab226ddbe642eeec77076ba987dd911e6137c550b6d6ba7eba9059f7de
SHA512c3cbebb89858fc51aeeda712da083256f705302e5434d02c2802250d91b50932a1a98080226750170cfbc8f4560d216366ac86ff39123c389fef5424e74f73d1