Analysis
-
max time kernel
143s -
max time network
156s -
platform
windows10_x64 -
resource
win10-en-20211208 -
submitted
29-01-2022 18:11
General
-
Target
576ca2b0c5fe1c756c245cb82d6a2ecce7f6976d5c3f3b338f686e06955032cb.pdf
-
Size
30KB
-
MD5
e8b1a9d2606d2e24692576a3dd3e9c10
-
SHA1
a419b57093387afd2669575915771f92ab0da01f
-
SHA256
576ca2b0c5fe1c756c245cb82d6a2ecce7f6976d5c3f3b338f686e06955032cb
-
SHA512
e9a434a814a86f57d15e222c85ac5f31cca74de48b6f32ec504e38b85156939ba5eacd7cbe47e2b721c02256e0d5f6f82f4cdf5822a1bbc6e2edab34dd357640
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\576ca2b0c5fe1c756c245cb82d6a2ecce7f6976d5c3f3b338f686e06955032cb.pdf"1⤵
- Checks processor information in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx