Analysis

  • max time kernel
    146s
  • max time network
    175s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-12-2023 23:21

General

  • Target

    06c15b9d89e46906acc2bd780a6295fe.pdf

  • Size

    76KB

  • MD5

    06c15b9d89e46906acc2bd780a6295fe

  • SHA1

    7758521ef3411becf131803bb72aa04aa0f4a0ef

  • SHA256

    f5cd72404541ab9f819081c4b7195dfad9e680509f057a0cc584cf624f44d4d7

  • SHA512

    7cd1b0570d578ab371fcd686915450a911934dfb891b6fb620a6d69106bd93c06ef68255690b2788851fcdeddad46da924d9bd730a7eac6aa33db02aba349feb

  • SSDEEP

    1536:fdC6Jhm9Ix5XXqcoO4kGtU7QToEkrLvhVj2chTRiH9WIhPneCPWApOqUtn:g6JQE5X6cmkGCLvbScl49tntmqy

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\06c15b9d89e46906acc2bd780a6295fe.pdf"
    1⤵
    • Checks processor information in registry
    • Suspicious use of SetWindowsHookEx
    PID:2080

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads