Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/06/2024, 00:50

General

  • Target

    14d003cb11b9acf1a8edfeeda17313594d4b1385c838c302a14f7eca84912c5b_NeikiAnalytics.pdf

  • Size

    188KB

  • MD5

    7a36920c30fc19a7a0c11ac4d9873680

  • SHA1

    023baa2e1ecba8d0f6d56702f587fc584235d33a

  • SHA256

    14d003cb11b9acf1a8edfeeda17313594d4b1385c838c302a14f7eca84912c5b

  • SHA512

    267bb65ab789e1d56312445859a57b7052320b6155d5b065fdb65201707ecd86cef0be2df73123288f6c8497af2335a6020c0b42d6395ae5bf868670bbb2247b

  • SSDEEP

    3072:V/KUxQkzJ7n95IYZKdlPyjVqh7CR6JOMxqPxxTKqDOxiPGxQOG+ugQYMJW:FRWkzT5I+0AjW7w6JOMs5xuGOA+E+u4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14d003cb11b9acf1a8edfeeda17313594d4b1385c838c302a14f7eca84912c5b_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1d33882d9fba1363d6d7f16daae99faa

    SHA1

    36634cf6bdd48c23126e16c2835550a0f01f6578

    SHA256

    3db8795b9fee08c57266679e13fb250074e6b645f8edef27c5d7f2b6250f52ca

    SHA512

    1dee1ee8b1757f0e307e925426dec7aeeb21dace5a7827301ed5418733d94ead43e148030fc9d623d53bf60bc0d365b9af7e2204f7e6116bf976549d53f3149e