Analysis
-
max time kernel
172s -
max time network
186s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
06-01-2024 17:08
General
-
Target
46c190b30fd7795f47f71db4140d2e25.pdf
-
Size
103KB
-
MD5
46c190b30fd7795f47f71db4140d2e25
-
SHA1
fabd85e684d32614864b1c715268bf3478a96af4
-
SHA256
e78948d0db79d15720679acf7dfdaa1540c5fa8abd3f3c7fa208c11f357d5968
-
SHA512
753a9cb180d2c32d988b6941c32fe6ea46a0f8ac33ba433a6646a2c2c920598345009ace5898b73efc997e4f6033a98135e156d06290e0d08fec39add8c38589
-
SSDEEP
3072:ubeqnXkjp5vny5i6twuQFX0NMxbTepeCJ:ubeqnXMp5fyI4QFX0ibg
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\46c190b30fd7795f47f71db4140d2e25.pdf"1⤵
- Checks processor information in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx