Analysis
- max time kernel
121s - max time network
122s - platform
windows7_x64 - resource
win7-20240611-en - resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system - submitted
29/06/2024, 06:33
Behavioral task
behavioral1
Sample
76e237367198d6d4244dca111b1ac8cb704bf81c2d5bb10713d8ba1cbb21ca6f_NeikiAnalytics.pdf
Resource
win7-20240611-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
76e237367198d6d4244dca111b1ac8cb704bf81c2d5bb10713d8ba1cbb21ca6f_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
- Target 76e237367198d6d4244dca111b1ac8cb704bf81c2d5bb10713d8ba1cbb21ca6f_NeikiAnalytics.pdf
- Size 78KB
- Sample240629-ha76basfmd
- SHA256 76e237367198d6d4244dca111b1ac8cb704bf81c2d5bb10713d8ba1cbb21ca6f
- MD5 8c96219628551e9840987bd33e826930
- SHA1 0cf9874adb566a657aa46f09f3ef7aa092091bd9
- SHA512 8fb4e02403c0749cb419eea116362931f037caa70227cbb62f0ed8ea9a30924cab3d1a1298448cc608c8bf9ecdda78f2fcdf5e709b076f4eb94655a4d78ea016
- SSDEEP 1536:QoBpNyNL+NI38j92md8d+EP6m1KX8OpKXxeVAIs8xcH+TtUmRT/l/aT5xeo5r/WY:XBiLUDg6m1KXXpKXx6AIsYc6tUmRhCTP
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2120 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2120 AcroRd32.exe 2120 AcroRd32.exe 2120 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\76e237367198d6d4244dca111b1ac8cb704bf81c2d5bb10713d8ba1cbb21ca6f_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2120
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 3306f4ca4c4a304792a37fad69ac0e59436fb62b6456092ccfefbff9431f35cb
- MD5 a711f4c7e4ab2772c97685851c77841f
- SHA1 e8453134fa09b62eb3e4dff9ca3b14ecd9e2bc4b
- SHA512 f60dff9854487614c588c60944498848c8a7d14a925f3437fd46be0d7fd2508878cf1d41791ccd82ee88e6135bce0b115999b9068ab0b7ea204508d06ddcde35
- MD5 SHA1 SHA512