Analysis
-
max time kernel
171s -
max time network
190s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29/12/2023, 21:01
General
-
Target
03e2578a62e06ce4bfdbac4fdbd22578.pdf
-
Size
44KB
-
MD5
03e2578a62e06ce4bfdbac4fdbd22578
-
SHA1
30da0b5c35781a993c51e7c050dcfda68c51ea98
-
SHA256
3a93b2afed0f03ee41118a63280a7a2fdcd90ff86d8249d4e154ea2401d24024
-
SHA512
6ab1896b8aa88d8104c060e271dd9a96b339222946160f796028735ee46ce68139205bb5084a4f7a96aef80703128aafccbdf2b2ef96c9fd2e71b6621078236e
-
SSDEEP
768:rnHvtfFqeeH8CyQCSnIy2fzqf690JtC40fj0K8sHRFLj8U2sLXX3:rPhQeK8boIrmf69At10fjhxHRF83OX3
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\03e2578a62e06ce4bfdbac4fdbd22578.pdf"1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx