Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
26/06/2024, 00:28
Behavioral task
behavioral1
Sample
2b3eb1b56e1797f2640ad32aafb6930e0c212b89f4e26f6875ce010a881cf105_NeikiAnalytics.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2b3eb1b56e1797f2640ad32aafb6930e0c212b89f4e26f6875ce010a881cf105_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
2b3eb1b56e1797f2640ad32aafb6930e0c212b89f4e26f6875ce010a881cf105_NeikiAnalytics.pdf
-
Size
5KB
-
MD5
b4ea57aa6e47f932c52fd95ac9fd9ce0
-
SHA1
192c939d5d08c970eb4e571984c35d6436053578
-
SHA256
2b3eb1b56e1797f2640ad32aafb6930e0c212b89f4e26f6875ce010a881cf105
-
SHA512
ba6db184a45bc8aa811b870d70853cbd76b358be15f3bda9db1d4b18dc63310425cf22f5f4accf32aef16a983a3fd8fc2b1d349afaa7bcac718b7ffde3bc355f
-
SSDEEP
96:emUiOC4ZfQgxd73hMsbdGn2xCrJG1GgmX1iQx7KbYd0cUeFfR2rB7HX503LwZUzB:eDj7z9xbdm2xCVG1Gg81iQx7qYVhkB7c
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1252 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1252 AcroRd32.exe 1252 AcroRd32.exe 1252 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2b3eb1b56e1797f2640ad32aafb6930e0c212b89f4e26f6875ce010a881cf105_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1252
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56e5ad520cb830869095d61939847c7cc
SHA19cd02e41e3b95af615bfd7157fa48b9c87f4136e
SHA256d9a5696bae98ff38d01f19379904ce9e4b33a393df733a593e10fe1165d232ea
SHA51209d45d0b5cc49f2c6f52934a57b245b6917cca526b38a83e370829e407e9d279f75e89ee6e2312a107ef309c00f82a675d30c6ee1f4ef25c22a926e412b3411a