Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
20/06/2024, 05:27
Behavioral task
behavioral1
Sample
3967b73d93ff2b45ca16618b2eb07c161fd7565579fe77971492d57ba8e1b986_NeikiAnalytics.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3967b73d93ff2b45ca16618b2eb07c161fd7565579fe77971492d57ba8e1b986_NeikiAnalytics.pdf
Resource
win10v2004-20240611-en
General
-
Target
3967b73d93ff2b45ca16618b2eb07c161fd7565579fe77971492d57ba8e1b986_NeikiAnalytics.pdf
-
Size
639KB
-
MD5
fb09987884884d130533c2ff4cf2abf0
-
SHA1
1fd53ae82def83e7ee5ba8a44e82eaffa8b964a3
-
SHA256
3967b73d93ff2b45ca16618b2eb07c161fd7565579fe77971492d57ba8e1b986
-
SHA512
e35279028a4731e5e370028f42fd7c96423c49c8e79244584e87d19047210556022b09ec9cec563327128ca40b22a478f1401159273cf4dd459eb86629cbbe2c
-
SSDEEP
12288:sYF0JFT9M+Ga86lVaUkyOr9LxCkc0DQoDncOk7V3Dhjvg:jFIge7Srrc+DcO8jjI
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1960 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1960 AcroRd32.exe 1960 AcroRd32.exe 1960 AcroRd32.exe 1960 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3967b73d93ff2b45ca16618b2eb07c161fd7565579fe77971492d57ba8e1b986_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1960
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c3c0b242ae8459a1e964f663128b4c35
SHA1588ae1329cfd79e6b6c3b825d7df991361fb765c
SHA2563503202fd17b4daedae3a842309725d508148403e9529946fbe6289149a544b6
SHA512c73dbdadfee7c7be7a46de3a370dc12def25f6a67ade31d59cfc43ea1bf3012b3a7edd5fd776e42e885ccc5df407eefd99a2f08a48ccfc3ebc31fb1894937956