Analysis
-
max time kernel
156s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 08:00
General
-
Target
12db5b2619a490b733474b9920107ea4.pdf
-
Size
113KB
-
MD5
12db5b2619a490b733474b9920107ea4
-
SHA1
d22929e98b3c9aeee4ab21b95f3ff704458b208d
-
SHA256
f0f10e5bddea89a739941237b3d75e3df122b4710c7135cee7b3df3770badba9
-
SHA512
48b5e576fc09ef961c96d507f2f53f978df675c072bbb89687348c77a67b0d508f50b50c352bb3325a3e777abb647ffb99a5e11147cafe31ac7c7d8ee702229b
-
SSDEEP
3072:Itn5DV6GUsRcppDI3ERHCJ3pBpf6OGsWNALsHJ:yn5ANsRcjDI3yiJ3bpyoWpp
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\12db5b2619a490b733474b9920107ea4.pdf"1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx