Analysis
-
max time kernel
153s -
max time network
173s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
31-12-2023 01:36
General
-
Target
230887366a840b6655bf475a512bb9fa.pdf
-
Size
84KB
-
MD5
230887366a840b6655bf475a512bb9fa
-
SHA1
8803ef5108d10f702afc36c6e9eb21231a55f1eb
-
SHA256
4d79958a41b0b5243493acb5804d9fa4a29985e9c9f6894f8070bec715dd3c91
-
SHA512
17d5b3e89b21d3eceb695765c82a2228e4fd4fe417968e65f87f5455b8318d4341da4333256971be84da0a739143a91587d00b9744aaecff9fefa792d6fb3024
-
SSDEEP
1536:GeVHBy0aNiFKHePiMndFJvOGb9I0atuY7CE7Tt7WkNpOPaWtwS/3zN7NBVqXCNqz:3BlxKHVMYGZIJt97l7hMPDR/3RLVxHW
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\230887366a840b6655bf475a512bb9fa.pdf"1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx