Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
29-06-2024 20:15
Behavioral task
behavioral1
Sample
ba482a6695dcd79a91d183ffece8c717d502a7b572a5f44135091c5c96c010d2_NeikiAnalytics.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ba482a6695dcd79a91d183ffece8c717d502a7b572a5f44135091c5c96c010d2_NeikiAnalytics.pdf
Resource
win10v2004-20240611-en
General
-
Target
ba482a6695dcd79a91d183ffece8c717d502a7b572a5f44135091c5c96c010d2_NeikiAnalytics.pdf
-
Size
5KB
-
MD5
98120d835da30daef2b9b72116e57ce0
-
SHA1
3acbaae4aa814df4bd9dc09c43bd6bed08bd977d
-
SHA256
ba482a6695dcd79a91d183ffece8c717d502a7b572a5f44135091c5c96c010d2
-
SHA512
bbd739bcbb0dbebba879133a08d62b3f35f8ec4ba9fbc03821e09722595ebb74c948443e0e36afd831428414455515da39050047a265947ed06752f24cbdc016
-
SSDEEP
96:emQTks8zV5+cgKgC4EmXMEj2Vzf/WiPSR2rB7HX503hwZUzNAwUSUZ1Q:eaPRhgNE8MEj2VL/WiPSkB7HX6m3w1sQ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2988 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2988 AcroRd32.exe 2988 AcroRd32.exe 2988 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ba482a6695dcd79a91d183ffece8c717d502a7b572a5f44135091c5c96c010d2_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2988
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD509b4a4ed89433aeceb4bfd1a88d408fd
SHA1442b139dc757c8b5b40a03b53c7cb11f56f759eb
SHA256662cf6e52e388f7cfc426f1a1f5f9830c4e79bc0ab90d75531f5af6825104551
SHA51246293238d8b21892a4055e94fc2dcdd9f6cf8bfb9ce61c9a7dab7f7feb9bc25f892d9e89a27e69dec8d16dd3458132fba0e40c68097b3feb9cd0eaa5bbad2ed9