Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
29/06/2024, 14:16
Behavioral task
behavioral1
Sample
aee59c49922e1943ad714878528c107587230fa631ce5a3061a81e7d7ece9746_NeikiAnalytics.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
aee59c49922e1943ad714878528c107587230fa631ce5a3061a81e7d7ece9746_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
aee59c49922e1943ad714878528c107587230fa631ce5a3061a81e7d7ece9746_NeikiAnalytics.pdf
-
Size
149KB
-
MD5
a584fcfc1dcade40dca8554128d1cf50
-
SHA1
21ee4fa6393d386688ece152711b2413c4892fd3
-
SHA256
aee59c49922e1943ad714878528c107587230fa631ce5a3061a81e7d7ece9746
-
SHA512
3d4b787f0844472c0a41b580514bdfa873697ef736dea405dbc00486e32fa48325267ee60c90537c693bcd5e71612ed6e894840d999556215abb5ba53ebf67c8
-
SSDEEP
3072:jadmWJtzdmrf0bAW9TEzkDRtGZ0HVcePX7aqv0QOUNzRWxdji8w7uX:jaxmrfJWVEzkDrGeHVcexv0ZVuw
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1232 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1232 AcroRd32.exe 1232 AcroRd32.exe 1232 AcroRd32.exe 1232 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aee59c49922e1943ad714878528c107587230fa631ce5a3061a81e7d7ece9746_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1232
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5fc220126be942df618150d12fb67d29f
SHA14bbf1504fce7f1a7b5431c8947d8d453cab1119c
SHA256c8645cf28bd95c7748602da3000425df694e16c0a00f57af32d41534949019b0
SHA512c31492cd204d77ad9d198de529c7552cecaaccda1b1e5bb95f7d9ab54af8a8cd35eccfd470b338dcfc1cd07edcec37575ca7612b2fd2bf5e0f9b430c6a3ec838