Analysis
-
max time kernel
161s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
31/12/2023, 05:11
General
-
Target
297a000a8d947e7e1f116b13236d92a7.pdf
-
Size
85KB
-
MD5
297a000a8d947e7e1f116b13236d92a7
-
SHA1
175b7d69c8df915949c49b59990a63254653fb96
-
SHA256
d51744f3af39aaf1e3efc3a077099602654975729f61a65abc19269d14bbd675
-
SHA512
bca6aeebf4bf2072c82d53dfd977ce340045d3624ccd55011ec04fb4c4c2f8cadd785de6668386f916ced8895775a1e9b2a8ab75bba36e66cdbc334be43bab6d
-
SSDEEP
1536:oBZkQHzgVXo34QTGJKryAUmYV0ECoijX43ZggbQujylUkWkNpOPaWNdMk3R1EAD9:yZkQHMK34QTG6fYVqo4XyZgqQ2CIPBMO
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\297a000a8d947e7e1f116b13236d92a7.pdf"1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx