Overview

overview

3

Static

static

3

08625f23a9...cs.pdf

windows7-x64

1

08625f23a9...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    29-06-2024 22:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    08625f23a91a342b998b54f3f03b06a9a522134d17706ecb4bb59a614ef613e6_NeikiAnalytics.pdf

  • Size

    855KB

  • MD5

    71f6fa1700f667f2b1c2f23e5b6dc790

  • SHA1

    ffd02b5ed358b5be5b7833b8e549a9796c410e84

  • SHA256

    08625f23a91a342b998b54f3f03b06a9a522134d17706ecb4bb59a614ef613e6

  • SHA512

    81dbc09c2290dd5b8981bf7d8dacd80e199040c5872979697309f388d92e5b1bc3a446cb8fc1b92b3e8fd238fe5479cd0f887e221bb41796319bb947cfd48087

  • SSDEEP

    24576:ZKnEndaULBFZc5839K8YSSHWxW5EXtsDtAe:ZIM/LPZc+YlEuMe+e

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08625f23a91a342b998b54f3f03b06a9a522134d17706ecb4bb59a614ef613e6_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    93926b439f611c28bbf8ea6c7b1dd669

    SHA1

    1d7f16b4ffaa41fdf89726d12f7b68ddc7363051

    SHA256

    95df2c5573d14cfd4a457aff7f9ba300b9ff548189c615fddc36d56914ce318c

    SHA512

    8fa25e3f1dbf6a65cea266870ae65b21d5d254e4b3fba8773780cdc8e3500768f5cfb16c691ea75f111c3376b987dca32bc435605f8dd4d757fcc04ee7b2f5a2

    Download Submit