Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
29/06/2024, 02:11
Behavioral task
behavioral1
Sample
4c3e7f51117c1e28484e760e93db3e6d51c47c3664f7fac1c705a9fb0c7bb82e_NeikiAnalytics.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4c3e7f51117c1e28484e760e93db3e6d51c47c3664f7fac1c705a9fb0c7bb82e_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
4c3e7f51117c1e28484e760e93db3e6d51c47c3664f7fac1c705a9fb0c7bb82e_NeikiAnalytics.pdf
-
Size
325KB
-
MD5
da4392b14ac395f3edf0502b237f4250
-
SHA1
f8e7ce75bda8aeb775487c922a4fd85016b07daa
-
SHA256
4c3e7f51117c1e28484e760e93db3e6d51c47c3664f7fac1c705a9fb0c7bb82e
-
SHA512
0aab953b1e2d59a2555f2edfb2e4940faa6a625e096303defc1831921cbe9aa7e527bcec0eed4142e5afcdd7c4042c0e6a8381ed44cc182225b201d3af580511
-
SSDEEP
6144:k1vgiY4RiYYCkI5vXwiE84bewoDhbhncvElaVa1uUbMpeg3QpcBZZmdp6QmslUDB:LiY4RiYYtI5XpYChbhzJ1uUbM3Q6ZszS
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2984 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2984 AcroRd32.exe 2984 AcroRd32.exe 2984 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4c3e7f51117c1e28484e760e93db3e6d51c47c3664f7fac1c705a9fb0c7bb82e_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2984
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55424a6801c7d063bd1c664cfe4332ae8
SHA1ebddd59cd9b0edd68630801a232e6d6767bafd5f
SHA256658ab49ffffc6d6520a7b3e6cdc0016141d18dc9bcfa524cae40186dc9be4ec6
SHA51200c26e4c04ff3336ac8875905efbd7fc0157c34685dc11f8114ffdf6b6a9adadec29aaf85e486ec19a9147a52c9d7c3bb0b45a807c9ef25d54dde82f21be6380