13401c74fcb4229b6660f44d389b487c146dc839b84ebdf778d87cdc3e976c9d

Analysis

max time kernel
144s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
06/01/2024, 17:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

46c68e2c7dfffe1edfd890983ba07bdf.pdf
Size

84KB
MD5

46c68e2c7dfffe1edfd890983ba07bdf
SHA1

9a61645d33032c7ae23a27ac44df438b83f9c1cd
SHA256

13401c74fcb4229b6660f44d389b487c146dc839b84ebdf778d87cdc3e976c9d
SHA512

65bda5c8c652a5d8d84e5e3d9bd661a2007f575ade13004d2c8124ece7c31c3b2ab831e4b9d8403c4ec5b48912fa5a219ee1005921090cc956556e77bce68838
SSDEEP

1536:NJbgn7S5jPSsq0kAiQ/anFlTtEJij7tJObyV60WCpOViIWcTOd60mq:LM74jaskBFJtEJPyV69ViC0r7

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	AcroRd32.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2648	AcroRd32.exe
2648	AcroRd32.exe
2648	AcroRd32.exe
2648	AcroRd32.exe

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\46c68e2c7dfffe1edfd890983ba07bdf.pdf"
1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
PID:2648

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads