Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    20-06-2024 00:14

General

  • Target

    1be717cc3ce3005a59402c4d04be0b6458820236c332134c10e7cb0ddff6b20d_NeikiAnalytics.pdf

  • Size

    81KB

  • MD5

    02f89eabb32849bc3727247f4b72b5d0

  • SHA1

    5ddfa9848d03b9f948e529e904fa0b1e5a4db0e5

  • SHA256

    1be717cc3ce3005a59402c4d04be0b6458820236c332134c10e7cb0ddff6b20d

  • SHA512

    fb82aa8d2cd7fb4f42b0c5b867090c4e55ec1d2be6592aebeb2e09d79639cef8e03f1295220cc595a17c1c4dedce4a3bd9d3383af805f015fbcd99eccd78d4de

  • SSDEEP

    1536:skcN8SEAQRMZr1qfYVcJqWZsnPlxJc1RxWHpOvTW6GNTpltYgGPFLBb13cd:YbekBqgVcJqesPlf+VvC1ltYgGPJy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1be717cc3ce3005a59402c4d04be0b6458820236c332134c10e7cb0ddff6b20d_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    555160464633ab7b58136983272e8e6e

    SHA1

    fe2db7976a3ec3d139f4c6466f8ea0015252c235

    SHA256

    512f33ab226ddbe642eeec77076ba987dd911e6137c550b6d6ba7eba9059f7de

    SHA512

    c3cbebb89858fc51aeeda712da083256f705302e5434d02c2802250d91b50932a1a98080226750170cfbc8f4560d216366ac86ff39123c389fef5424e74f73d1