Analysis
-
max time kernel
165s -
max time network
173s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29/12/2023, 23:12
General
-
Target
0699020dbbb647756dbbc713ef618b3f.pdf
-
Size
34KB
-
MD5
0699020dbbb647756dbbc713ef618b3f
-
SHA1
2c080ad7fa5e6c03f16bd671dd463f15e310bcaf
-
SHA256
7dba9e4ba65a1cbd835c330f22140d730230ee949b410eb58ff776cf3f9e1ab2
-
SHA512
ecf6ed9902dbbc6db868d55651419a39b0d177adccb323aa1f6b2777597aee5033950e5024bb9ced35e283ee72805d797a68440ec02c9755e4a6eb18e7c8b42c
-
SSDEEP
384:lSI9uLTuuD7lKha4XuBEsxooSPhAuMHKgv+5u9hKjJ3e9CUSOpSttp2DxyKfCt6W:F9uLqYwEjBEskMt+5u6g7QQjQV3
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0699020dbbb647756dbbc713ef618b3f.pdf"1⤵
- Checks processor information in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx