Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    26/06/2024, 00:28

General

  • Target

    2b3eb1b56e1797f2640ad32aafb6930e0c212b89f4e26f6875ce010a881cf105_NeikiAnalytics.pdf

  • Size

    5KB

  • MD5

    b4ea57aa6e47f932c52fd95ac9fd9ce0

  • SHA1

    192c939d5d08c970eb4e571984c35d6436053578

  • SHA256

    2b3eb1b56e1797f2640ad32aafb6930e0c212b89f4e26f6875ce010a881cf105

  • SHA512

    ba6db184a45bc8aa811b870d70853cbd76b358be15f3bda9db1d4b18dc63310425cf22f5f4accf32aef16a983a3fd8fc2b1d349afaa7bcac718b7ffde3bc355f

  • SSDEEP

    96:emUiOC4ZfQgxd73hMsbdGn2xCrJG1GgmX1iQx7KbYd0cUeFfR2rB7HX503LwZUzB:eDj7z9xbdm2xCVG1Gg81iQx7qYVhkB7c

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2b3eb1b56e1797f2640ad32aafb6930e0c212b89f4e26f6875ce010a881cf105_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6e5ad520cb830869095d61939847c7cc

    SHA1

    9cd02e41e3b95af615bfd7157fa48b9c87f4136e

    SHA256

    d9a5696bae98ff38d01f19379904ce9e4b33a393df733a593e10fe1165d232ea

    SHA512

    09d45d0b5cc49f2c6f52934a57b245b6917cca526b38a83e370829e407e9d279f75e89ee6e2312a107ef309c00f82a675d30c6ee1f4ef25c22a926e412b3411a