Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/06/2024, 10:01

General

  • Target

    6198bf8beeaf008e317ec55637ccdeba23d7930e16c59961ccc43046bd614c12_NeikiAnalytics.pdf

  • Size

    599KB

  • MD5

    ec0b7e2d9aab77319de3f5f72cb04170

  • SHA1

    d6d51e48d9fcda7c897d728150fd235e3e9a044d

  • SHA256

    6198bf8beeaf008e317ec55637ccdeba23d7930e16c59961ccc43046bd614c12

  • SHA512

    5be44f60d7777684e969cc12a0fc79679fba021fe246b41616d972e171d3ff68ff8b311c74e53353aadad76d18240ae25854759c53d7c8590304d3aa229e47f6

  • SSDEEP

    12288:Jo+6kGlfSbxTaYUPKBx0VN2MGtAjWa4LuOJu6vgSxDFh0Wbbdu:Jo1k4fSb1GKBx2cMUbaGuOJu3Sjh0Wv4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6198bf8beeaf008e317ec55637ccdeba23d7930e16c59961ccc43046bd614c12_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    84cfcab756079e32fa0fee85b2340044

    SHA1

    f0e602470ee62529746ef259a547d0672a375aa3

    SHA256

    e17902b424c97310c282e64065409c8855563b23e618f9024f0e21ae7e9c3990

    SHA512

    77d86b15532aa25ed3f26d2c197cec8b1ce5b205bc90c2656c7ab064bba03928c9c9b60f2231feccfb5edfc7123ba13a78741cfc493e59cb580dd333cb105b54