Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20/06/2024, 05:27

General

  • Target

    3967b73d93ff2b45ca16618b2eb07c161fd7565579fe77971492d57ba8e1b986_NeikiAnalytics.pdf

  • Size

    639KB

  • MD5

    fb09987884884d130533c2ff4cf2abf0

  • SHA1

    1fd53ae82def83e7ee5ba8a44e82eaffa8b964a3

  • SHA256

    3967b73d93ff2b45ca16618b2eb07c161fd7565579fe77971492d57ba8e1b986

  • SHA512

    e35279028a4731e5e370028f42fd7c96423c49c8e79244584e87d19047210556022b09ec9cec563327128ca40b22a478f1401159273cf4dd459eb86629cbbe2c

  • SSDEEP

    12288:sYF0JFT9M+Ga86lVaUkyOr9LxCkc0DQoDncOk7V3Dhjvg:jFIge7Srrc+DcO8jjI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3967b73d93ff2b45ca16618b2eb07c161fd7565579fe77971492d57ba8e1b986_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1960

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c3c0b242ae8459a1e964f663128b4c35

          SHA1

          588ae1329cfd79e6b6c3b825d7df991361fb765c

          SHA256

          3503202fd17b4daedae3a842309725d508148403e9529946fbe6289149a544b6

          SHA512

          c73dbdadfee7c7be7a46de3a370dc12def25f6a67ade31d59cfc43ea1bf3012b3a7edd5fd776e42e885ccc5df407eefd99a2f08a48ccfc3ebc31fb1894937956