Analysis
-
max time kernel
160s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 23:25
General
-
Target
1ff19ab49b1e6360f1811cab07a3f6cc.pdf
-
Size
89KB
-
MD5
1ff19ab49b1e6360f1811cab07a3f6cc
-
SHA1
972c069606211adba601681d593b4ee144e1c7c3
-
SHA256
8600650bd325388cfe53c5753f2d5acc9e92f2421ddb0d5775defdb73462fadd
-
SHA512
da3ec482c436611517947fd6d898816e910755338c0dc3875e52a08fe906c46f411c003fd8d335079553e9008d61fa7de15ede0196a84ae015ee7eaf12a291b1
-
SSDEEP
1536:J+lha/aTht4kqenL0x8Ro44F1zZvmb7zhiIHG4GtuB3WZWoKjDCf6M/DWmGWUpOP:UlSa9fqenL0Z44LF+bhiImFt0ljOFbWI
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1ff19ab49b1e6360f1811cab07a3f6cc.pdf"1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx