Analysis
-
max time kernel
168s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
31/12/2023, 07:30
General
-
Target
2d72f33c4925d324ca29450ea601eb2c.pdf
-
Size
83KB
-
MD5
2d72f33c4925d324ca29450ea601eb2c
-
SHA1
e5d53e56e81cfb2d2c4d7bf45b3dc354f30d2116
-
SHA256
655351f6c6e7ba835ee5241be576d8c37388d9fd1470489456831673f9ce8f20
-
SHA512
13301b89bb1e27bf664e09060037c83501aac329c1d9969386217f38ede5c01e4d77211dd45dfb1d353a6d53f8bf705969b85b7a6100cbf0e2f8b0896ea51e33
-
SSDEEP
1536:2FAUqqkUK0ceE/ZLPN3SHQgXB7HLuAPzNpYWlOz4WE0cyQskNZxWYpO2Os7cVjWC:6AUkeE/NpSH/druAPzNKRzEfTZI2dcVl
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2d72f33c4925d324ca29450ea601eb2c.pdf"1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx