Analysis

  • max time kernel
    164s
  • max time network
    176s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    08-05-2022 22:30

General

  • Target

    8bd268a1f1a237e479f07d836d44c80e2f44909b9f9c58067b1da1646dccfdda.pdf

  • Size

    354KB

  • MD5

    6ad61eadacda1c9cb7284d63324e87e7

  • SHA1

    5def73c0afbe79e7979e86f30d3a3c3de7b90162

  • SHA256

    8bd268a1f1a237e479f07d836d44c80e2f44909b9f9c58067b1da1646dccfdda

  • SHA512

    29fe01fcf8cb16b0ecf8257c4c9f7bb433c4b6a2d12aef825c27405caa2433613f9e35f534842a1b22ad88190c99dd4a54fda6fba4835aa9e2d723a9d117668d

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8bd268a1f1a237e479f07d836d44c80e2f44909b9f9c58067b1da1646dccfdda.pdf"
    1⤵
    • Checks processor information in registry
    • Suspicious use of SetWindowsHookEx
    PID:4644

Network

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Replay Monitor

Loading Replay Monitor...

Downloads