Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 06:40
Behavioral task
behavioral1
Sample
5e08971660e84774282cfe3fc8e144dd32ebfbca4b9142563431b87fc30b8601_NeikiAnalytics.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5e08971660e84774282cfe3fc8e144dd32ebfbca4b9142563431b87fc30b8601_NeikiAnalytics.pdf
Resource
win10v2004-20240611-en
General
-
Target
5e08971660e84774282cfe3fc8e144dd32ebfbca4b9142563431b87fc30b8601_NeikiAnalytics.pdf
-
Size
41KB
-
MD5
e1395570f55c58910038435e3eb068c0
-
SHA1
72d331b892818d054b7140462341d94e2d2a4384
-
SHA256
5e08971660e84774282cfe3fc8e144dd32ebfbca4b9142563431b87fc30b8601
-
SHA512
b16d3b5fe166a4193f4a5d4c1e3294345053804160602d19d8d6ac9112c32ea3cc6d3e2f0508f0a45abf388a98fd080ec5e998d4a0d1b97ed0fde8ecb066729c
-
SSDEEP
768:PXRavy6OoFjU2VjQnXXuSf+3HaBjrJTAbBhIJyKLKTePhacYogz3/h:PBiVjQXe136HJTWGyOKTiGxz3/h
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 492 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 492 AcroRd32.exe 492 AcroRd32.exe 492 AcroRd32.exe 492 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5e08971660e84774282cfe3fc8e144dd32ebfbca4b9142563431b87fc30b8601_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:492
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5fb8d90e6bf13874500497e8af20ffc5c
SHA1e13f87fd8f65fd2ad2650191fc729ef324a3887b
SHA2569fdc52ef5ace2ea2cd9325ae4bdf3596439799161ebcd42a170a51e7d4ee1bc9
SHA5128a4bd8f33806c30ca314f187e94ba665d6508b8e7456cfb1654b63081be85dea781e4ae3d4e904e1556f4237a1d6fa39bd0bc3ee79935a83573124f575538db3