Analysis
-
max time kernel
176s -
max time network
202s -
platform
windows10_x64 -
resource
win10-en-20211208 -
submitted
29-01-2022 20:03
General
-
Target
1192b5111f7c75417215a1285a20147f5ab085368fa95d74e7603d26736057ac.pdf
-
Size
136KB
-
MD5
a45bca742fcf0dfb48b31f2cb1b66948
-
SHA1
827bc395dcc95b08f96d36b5e131d8dbbaadb107
-
SHA256
1192b5111f7c75417215a1285a20147f5ab085368fa95d74e7603d26736057ac
-
SHA512
4151666dba9513f008d2be66d541c02894ac04a7218e093efe57dc5d0b3f7a852991cf31f241488da4e4f46306198e058253ad45563a55c4b2b654554fdc4a27
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1192b5111f7c75417215a1285a20147f5ab085368fa95d74e7603d26736057ac.pdf"1⤵
- Checks processor information in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx