Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 21:59
Behavioral task
behavioral1
Sample
167ded44c90a21c8add9f0a806c3f0be7c8238c9a1ab2c28980f66fddfa436db_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
167ded44c90a21c8add9f0a806c3f0be7c8238c9a1ab2c28980f66fddfa436db_NeikiAnalytics.pdf
Resource
win10v2004-20240226-en
General
-
Target
167ded44c90a21c8add9f0a806c3f0be7c8238c9a1ab2c28980f66fddfa436db_NeikiAnalytics.pdf
-
Size
5KB
-
MD5
dff2107f22f21e8a5a6872ce6da50890
-
SHA1
2c3aee5585edf6cad98b4a15a914fdb969301f22
-
SHA256
167ded44c90a21c8add9f0a806c3f0be7c8238c9a1ab2c28980f66fddfa436db
-
SHA512
f49656e3240f2335165422d2e3e29549ac49fceefa0874890272497bc2d40ab324995d48c40cf124be46f3224e98ee5e6464b0996f91c800fbb4c4eeca67a77b
-
SSDEEP
96:emB3ZZUUL11hOOmXJGJb3NP5hwuwSR2rB7HX503M6I6/wZUzNAwUSUHi:euZHL11hOO8JGJb3NP5hwzSkB7HX6c61
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1704 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1704 AcroRd32.exe 1704 AcroRd32.exe 1704 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\167ded44c90a21c8add9f0a806c3f0be7c8238c9a1ab2c28980f66fddfa436db_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1704
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5712833dc7efa36dd231c384235f984ba
SHA15a9e450196e4ce4d0b9b5d322063e471dd0d9cf4
SHA256d694ff4de34836f8e2bea309dbcfb7f926585480e737f58d57c18bc70c589547
SHA512565ab95a9241dd1921218afd7b4367c3125eaca478c39c762e1f3aff341abdaf52aaa94f0f5ce748d7aeae4ee1c88c2761b84381c495d6850acfad24dafaf073