Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    29/06/2024, 14:16

General

  • Target

    aee59c49922e1943ad714878528c107587230fa631ce5a3061a81e7d7ece9746_NeikiAnalytics.pdf

  • Size

    149KB

  • MD5

    a584fcfc1dcade40dca8554128d1cf50

  • SHA1

    21ee4fa6393d386688ece152711b2413c4892fd3

  • SHA256

    aee59c49922e1943ad714878528c107587230fa631ce5a3061a81e7d7ece9746

  • SHA512

    3d4b787f0844472c0a41b580514bdfa873697ef736dea405dbc00486e32fa48325267ee60c90537c693bcd5e71612ed6e894840d999556215abb5ba53ebf67c8

  • SSDEEP

    3072:jadmWJtzdmrf0bAW9TEzkDRtGZ0HVcePX7aqv0QOUNzRWxdji8w7uX:jaxmrfJWVEzkDrGeHVcexv0ZVuw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aee59c49922e1943ad714878528c107587230fa631ce5a3061a81e7d7ece9746_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fc220126be942df618150d12fb67d29f

    SHA1

    4bbf1504fce7f1a7b5431c8947d8d453cab1119c

    SHA256

    c8645cf28bd95c7748602da3000425df694e16c0a00f57af32d41534949019b0

    SHA512

    c31492cd204d77ad9d198de529c7552cecaaccda1b1e5bb95f7d9ab54af8a8cd35eccfd470b338dcfc1cd07edcec37575ca7612b2fd2bf5e0f9b430c6a3ec838