Resubmissions

10-03-2022 20:47

220310-zktt4sbbf8 6

10-03-2022 20:44

220310-zjjyhsedam 3

Analysis

  • max time kernel
    88s
  • max time network
    90s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220112
  • submitted
    10-03-2022 20:44

General

  • Target

    Comprobante_Fiscal_Digital.pdf

  • Size

    23KB

  • MD5

    bc23de1e7d7774f4714394419b7f56ed

  • SHA1

    fbeb9f7a7a058f49ee9cc13bd6430d07b1843ff3

  • SHA256

    f230c757f010bea596a13a00699349a05426d7c9767276a425014226a0b1c9f4

  • SHA512

    0626fb48dacb5d601ab8e623c5b50959d471b9f266a247768bd5dd4094f04c19b9ca52cfcb604adc7cbad7ddc3f40a0b87ce3ed89fe4aff35ab8c67e72d4a2d5

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Comprobante_Fiscal_Digital.pdf"
    1⤵
    • Checks processor information in registry
    • Suspicious use of SetWindowsHookEx
    PID:492

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads