Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
30/06/2024, 00:50
Static task
static1
Behavioral task
behavioral1
Sample
14d003cb11b9acf1a8edfeeda17313594d4b1385c838c302a14f7eca84912c5b_NeikiAnalytics.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
14d003cb11b9acf1a8edfeeda17313594d4b1385c838c302a14f7eca84912c5b_NeikiAnalytics.pdf
Resource
win10v2004-20240611-en
General
-
Target
14d003cb11b9acf1a8edfeeda17313594d4b1385c838c302a14f7eca84912c5b_NeikiAnalytics.pdf
-
Size
188KB
-
MD5
7a36920c30fc19a7a0c11ac4d9873680
-
SHA1
023baa2e1ecba8d0f6d56702f587fc584235d33a
-
SHA256
14d003cb11b9acf1a8edfeeda17313594d4b1385c838c302a14f7eca84912c5b
-
SHA512
267bb65ab789e1d56312445859a57b7052320b6155d5b065fdb65201707ecd86cef0be2df73123288f6c8497af2335a6020c0b42d6395ae5bf868670bbb2247b
-
SSDEEP
3072:V/KUxQkzJ7n95IYZKdlPyjVqh7CR6JOMxqPxxTKqDOxiPGxQOG+ugQYMJW:FRWkzT5I+0AjW7w6JOMs5xuGOA+E+u4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2332 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2332 AcroRd32.exe 2332 AcroRd32.exe 2332 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14d003cb11b9acf1a8edfeeda17313594d4b1385c838c302a14f7eca84912c5b_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2332
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51d33882d9fba1363d6d7f16daae99faa
SHA136634cf6bdd48c23126e16c2835550a0f01f6578
SHA2563db8795b9fee08c57266679e13fb250074e6b645f8edef27c5d7f2b6250f52ca
SHA5121dee1ee8b1757f0e307e925426dec7aeeb21dace5a7827301ed5418733d94ead43e148030fc9d623d53bf60bc0d365b9af7e2204f7e6116bf976549d53f3149e