Analysis
-
max time kernel
167s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 22:34
General
-
Target
1e973607c4dacc0f022d3e370d17eab9.pdf
-
Size
85KB
-
MD5
1e973607c4dacc0f022d3e370d17eab9
-
SHA1
bc895f23d4d1128f1ded0560e6cd920ea54fabd7
-
SHA256
7a010d33c27ac82ffb5640130bd296e91d97ad7ae6e77718bab98f44b15c702e
-
SHA512
6ac6b0c127d4390998d1d03686dc65ac02fce2f5737a0ce01c835f710f149885917e1070bf3f21e8aa6ad8110c1a7fed8d51e69d56d54880394aa4147ae6a089
-
SSDEEP
1536:M/d3zULVHivMWYrllJ1v6ErdeUEMolepU/WOpOaZJ7/ejW6lGd5zWz:yd3ILZwMrxl/SAYUbuepPaZJ7WaS
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1e973607c4dacc0f022d3e370d17eab9.pdf"1⤵
- Checks processor information in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx