Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    29-06-2024 20:15

General

  • Target

    ba482a6695dcd79a91d183ffece8c717d502a7b572a5f44135091c5c96c010d2_NeikiAnalytics.pdf

  • Size

    5KB

  • MD5

    98120d835da30daef2b9b72116e57ce0

  • SHA1

    3acbaae4aa814df4bd9dc09c43bd6bed08bd977d

  • SHA256

    ba482a6695dcd79a91d183ffece8c717d502a7b572a5f44135091c5c96c010d2

  • SHA512

    bbd739bcbb0dbebba879133a08d62b3f35f8ec4ba9fbc03821e09722595ebb74c948443e0e36afd831428414455515da39050047a265947ed06752f24cbdc016

  • SSDEEP

    96:emQTks8zV5+cgKgC4EmXMEj2Vzf/WiPSR2rB7HX503hwZUzNAwUSUZ1Q:eaPRhgNE8MEj2VL/WiPSkB7HX6m3w1sQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ba482a6695dcd79a91d183ffece8c717d502a7b572a5f44135091c5c96c010d2_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    09b4a4ed89433aeceb4bfd1a88d408fd

    SHA1

    442b139dc757c8b5b40a03b53c7cb11f56f759eb

    SHA256

    662cf6e52e388f7cfc426f1a1f5f9830c4e79bc0ab90d75531f5af6825104551

    SHA512

    46293238d8b21892a4055e94fc2dcdd9f6cf8bfb9ce61c9a7dab7f7feb9bc25f892d9e89a27e69dec8d16dd3458132fba0e40c68097b3feb9cd0eaa5bbad2ed9