Analysis
-
max time kernel
171s -
max time network
186s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 04:41
General
-
Target
0ed1d03150203be5b08763d2881a9b18.pdf
-
Size
85KB
-
MD5
0ed1d03150203be5b08763d2881a9b18
-
SHA1
f28ebfe10455275448acb9811d700b19854201b1
-
SHA256
42bd43bdc39fa967b8c78ec6aba0a9752bf249ff78e91d7a8e9b59aa478762f2
-
SHA512
21a46329cf523efd81a3b10a9cbf9e3dc1a249f97d103ed28fa6013aa6b00c3128dfc573eecd9ba6f112883da32dce418b6c92e5d0855e006c7a068c2ddc2101
-
SSDEEP
1536:qaEu9g3eHwm3ozEcDrrUg5oEQdF6H3BIyVRnM4WapOtQHW3LSTNq+NtGOw:xjgX7zUg5oIxIIMhtQxTg+Xq
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ed1d03150203be5b08763d2881a9b18.pdf"1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx