Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 06:40

General

  • Target

    5e08971660e84774282cfe3fc8e144dd32ebfbca4b9142563431b87fc30b8601_NeikiAnalytics.pdf

  • Size

    41KB

  • MD5

    e1395570f55c58910038435e3eb068c0

  • SHA1

    72d331b892818d054b7140462341d94e2d2a4384

  • SHA256

    5e08971660e84774282cfe3fc8e144dd32ebfbca4b9142563431b87fc30b8601

  • SHA512

    b16d3b5fe166a4193f4a5d4c1e3294345053804160602d19d8d6ac9112c32ea3cc6d3e2f0508f0a45abf388a98fd080ec5e998d4a0d1b97ed0fde8ecb066729c

  • SSDEEP

    768:PXRavy6OoFjU2VjQnXXuSf+3HaBjrJTAbBhIJyKLKTePhacYogz3/h:PBiVjQXe136HJTWGyOKTiGxz3/h

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5e08971660e84774282cfe3fc8e144dd32ebfbca4b9142563431b87fc30b8601_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:492

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          fb8d90e6bf13874500497e8af20ffc5c

          SHA1

          e13f87fd8f65fd2ad2650191fc729ef324a3887b

          SHA256

          9fdc52ef5ace2ea2cd9325ae4bdf3596439799161ebcd42a170a51e7d4ee1bc9

          SHA512

          8a4bd8f33806c30ca314f187e94ba665d6508b8e7456cfb1654b63081be85dea781e4ae3d4e904e1556f4237a1d6fa39bd0bc3ee79935a83573124f575538db3