Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    29/06/2024, 14:30

General

  • Target

    af50056b32b89e26e9917b0f3c514e4c66b88f259e8674528bd743f86351eb7c_NeikiAnalytics.pdf

  • Size

    5KB

  • MD5

    c50a6d7cf1e30aeb9fc78a4c6b7f5ae0

  • SHA1

    8d444cbe6630b6e2b29184b4dc13f2a9463276b5

  • SHA256

    af50056b32b89e26e9917b0f3c514e4c66b88f259e8674528bd743f86351eb7c

  • SHA512

    6f0fad8de1e2fe7f10f82efadc4aee13aad926dbc9eb835304b5b8fd9900482361e78f9d63e9656ef86e4a29ddf913667b37538426a43ca521485d415ac927a8

  • SSDEEP

    96:emnPw7I3+TXU00zVZTu+mXmt2ntb+PttjnxKxVER2rB7HX503ye/wZUzNAwUSUWV:e2o7g+TX8zTTu+8mt4tC3jxuEkB7HX6F

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\af50056b32b89e26e9917b0f3c514e4c66b88f259e8674528bd743f86351eb7c_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    709d7b73f0cb1c0661c5cd0717ac36f6

    SHA1

    0dcdc344e9134e10699dab608d09f10db689f5b4

    SHA256

    29bbe7f3099780c5b1b3dc3c592d35f13fe0eaaf58d4750811d06f2a68fd95d8

    SHA512

    c128529ca7dae597a50835980f787bfb341ee713a9c809227c6ed2e8d25a783e3512ea7dca62863ef071ffce918fbc00ce1af4ae0f839c9598b6d828d34a067a