Analysis
-
max time kernel
166s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 04:21
General
-
Target
0e49e1827cfb17b1dd1658b92f378115.pdf
-
Size
41KB
-
MD5
0e49e1827cfb17b1dd1658b92f378115
-
SHA1
66891df8f9e9907c8a12a6e4df3ce43e8233f992
-
SHA256
d20b967c1350d95b48156583f7b482ffcb4dddd482ed32eea7992a033205611c
-
SHA512
adc5cf404e77034396a5b7c2df076ef1b26e0a84f9d0cb0e40f3dab348caf12af62a0b633912bcf8841626580d045aa984f684186db7047270b3578e308023bf
-
SSDEEP
768:1aZw1j8vnsfUpD4Y3/Hoba5jVD+wYC//ROCPBCReZQogfDSX:1aFrSeAu76W4C5aeZQw
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0e49e1827cfb17b1dd1658b92f378115.pdf"1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx