Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    20/06/2024, 00:14 UTC

General

  • Target

    1be717cc3ce3005a59402c4d04be0b6458820236c332134c10e7cb0ddff6b20d_NeikiAnalytics.pdf

  • Size

    81KB

  • MD5

    02f89eabb32849bc3727247f4b72b5d0

  • SHA1

    5ddfa9848d03b9f948e529e904fa0b1e5a4db0e5

  • SHA256

    1be717cc3ce3005a59402c4d04be0b6458820236c332134c10e7cb0ddff6b20d

  • SHA512

    fb82aa8d2cd7fb4f42b0c5b867090c4e55ec1d2be6592aebeb2e09d79639cef8e03f1295220cc595a17c1c4dedce4a3bd9d3383af805f015fbcd99eccd78d4de

  • SSDEEP

    1536:skcN8SEAQRMZr1qfYVcJqWZsnPlxJc1RxWHpOvTW6GNTpltYgGPFLBb13cd:YbekBqgVcJqesPlf+VvC1ltYgGPJy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1be717cc3ce3005a59402c4d04be0b6458820236c332134c10e7cb0ddff6b20d_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    555160464633ab7b58136983272e8e6e

    SHA1

    fe2db7976a3ec3d139f4c6466f8ea0015252c235

    SHA256

    512f33ab226ddbe642eeec77076ba987dd911e6137c550b6d6ba7eba9059f7de

    SHA512

    c3cbebb89858fc51aeeda712da083256f705302e5434d02c2802250d91b50932a1a98080226750170cfbc8f4560d216366ac86ff39123c389fef5424e74f73d1

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.