Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    29/06/2024, 02:11

General

  • Target

    4c3e7f51117c1e28484e760e93db3e6d51c47c3664f7fac1c705a9fb0c7bb82e_NeikiAnalytics.pdf

  • Size

    325KB

  • MD5

    da4392b14ac395f3edf0502b237f4250

  • SHA1

    f8e7ce75bda8aeb775487c922a4fd85016b07daa

  • SHA256

    4c3e7f51117c1e28484e760e93db3e6d51c47c3664f7fac1c705a9fb0c7bb82e

  • SHA512

    0aab953b1e2d59a2555f2edfb2e4940faa6a625e096303defc1831921cbe9aa7e527bcec0eed4142e5afcdd7c4042c0e6a8381ed44cc182225b201d3af580511

  • SSDEEP

    6144:k1vgiY4RiYYCkI5vXwiE84bewoDhbhncvElaVa1uUbMpeg3QpcBZZmdp6QmslUDB:LiY4RiYYtI5XpYChbhzJ1uUbM3Q6ZszS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4c3e7f51117c1e28484e760e93db3e6d51c47c3664f7fac1c705a9fb0c7bb82e_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2984

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5424a6801c7d063bd1c664cfe4332ae8

          SHA1

          ebddd59cd9b0edd68630801a232e6d6767bafd5f

          SHA256

          658ab49ffffc6d6520a7b3e6cdc0016141d18dc9bcfa524cae40186dc9be4ec6

          SHA512

          00c26e4c04ff3336ac8875905efbd7fc0157c34685dc11f8114ffdf6b6a9adadec29aaf85e486ec19a9147a52c9d7c3bb0b45a807c9ef25d54dde82f21be6380